GR
Product
Groupware
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 16Low 0
Watch
Add Groupware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-6364 | 8.8 | Nov 5 | Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book Affected: 5.1.2 |
| CVE-2019-12095 | 8.8 | Oct 24 | Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a… Affected: through 5.2.22 |
| CVE-2019-9858 | 8.8 | May 29 | Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17 Affected: 5.2.17; 5.2.22 |
| CVE-2017-7413 | 8.8 | Apr 4 | In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has… Affected: through 5.2.17 |
| CVE-2022-30287 | 8.0 | Jul 28 | Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class Affected: through 5.2.22 |
| CVE-2017-15235 | 7.5 | Oct 11 | The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that… Affected: 5.2.21 |
| CVE-2017-7414 | 7.5 | Apr 4 | In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user's… Affected: 5.0.0; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +17 more |
Showing 7