CVE-2020-15954

—

CVSS 3.1

6.5 medium

EPSS

<1%p49

Published

Jul 27, 2020 (Jul 27, 2020)

Modified

Jun 17, 2026

Description

KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.

Vendors: kde debian
Products: kmail, debian linux
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news1 stories

STARTTLS implementations in email clients & servers plagued by 40+ vulnerabilities

The RecordDec 13, 00:00 UTC · Dec 13, 2022Vulnerability CVE-2020-9941 CVE-2021-30696 CVE-2020-15685+14 CVEs

47