GR
Product
Groupware
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 16Low 0
Watch
Add Groupware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8866 | 6.5 | Mar 23 | This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22 Affected: 5.2.22 |
| CVE-2013-6275 | 6.5 | Nov 5 | Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php Affected: through 5.1.2 |
| CVE-2020-8865 | 6.3 | Mar 23 | This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22 Affected: 5.2.22 |
| CVE-2021-26929 | 6.1 | Feb 14 | An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used) Affected: through 5.2.22 |
| CVE-2020-8034 | 6.1 | May 18 | Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET… Affected: 5.2.22 |
| CVE-2020-8035 | 6.1 | May 18 | The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a… Affected: before 5.2.22 |
| CVE-2019-12094 | 6.1 | Oct 24 | Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f&user_name= or admin/user.php?form=remove_f&user_name= or admin/config/diff.php?app=… Affected: through 5.2.22 |
| CVE-2016-5303 | 6.1 | Dec 20 | Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject… Affected: 5.2.15; 5.2.15 |
| CVE-2016-2228 | 6.1 | Apr 13 | Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows… Affected: through 5.2.11 |
| CVE-2015-8807 | 6.1 | Apr 13 | Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and… Affected: 5.2.11; 5.2.11 |
| CVE-2017-16908 | 5.4 | Nov 20 | In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource Affected: 5.2.19 |
| CVE-2017-16907 | 5.4 | Nov 20 | In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action Affected: 5.2.19; 5.2.21 |
| CVE-2017-16906 | 5.4 | Nov 20 | In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action Affected: 5.2.19 through 5.2.22 |
| CVE-2007-1679 | 5.4 | Mar 26 | Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors… Affected: 1.0 |
| CVE-2025-41066 | 5.3 | Dec 2 | Disclosure of sensitive information in Horde Groupware Affected: 5.2.22 |
| CVE-2013-6365 | 5.3 | Nov 5 | Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions Affected: 5.1.2 |
Showing 16