Horde Vulnerabilidades

Curso de tempo

Tipo

Produto

Horde Groupware22
Horde IMP22
Horde Groupware Webmail Edition20
Horde Application Framework14
Horde IMP Webmail12

Medidas

Official Fix92
Temporary Fix0
Workaround0
Unavailable4
Not Defined20

Explorabilidade

High10
Functional0
Proof-of-Concept48
Unproven2
Not Defined56

Tipo de acesso

Not Defined0
Physical0
Local2
Adjacent0
Network114

Autenticação

Not Defined0
High0
Low22
None94

Actividade do utilizador

Not Defined0
Required100
None16

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤46
≤560
≤68
≤724
≤814
≤92
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤422
≤546
≤626
≤76
≤812
≤92
≤102

VulDB

≤10
≤20
≤30
≤46
≤568
≤62
≤724
≤814
≤90
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤78
≤80
≤94
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fabricante

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explorar 0 dia

<1k28
<2k78
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Explorar hoje

<1k116
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (28): Accounts (1), Application Framework (16), Chora (1), Forwards (1), Gollem (1), Groupware (18), Groupware Webmail Edition (19), Horde Application Framework (1), IMP (24), IMP Webmail (7), IMP Webmail Client (1), Ingo H3 (1), Kronolith (6), Kronolith H3 (3), Kronolith H4 (1), Manager (1), Mnemo (1), Nag (1), Nag Task List Manager H3 (1), Passwd (1), Turba (1), Turba Contact Manager (1), Turba Contact Manager H3 (1), Turba H3 (2), Vaction (1), Webmail (3), cPanel (1), passwd (1)

Link to Vendor Website: https://www.horde.org/

Publicado emBaseTempVulnerabilidadeProdExpMasEPSSCTICVE
09/06/20226.36.3Horde Webmail Address Book Driver.php create direitos alargadosGroupware SoftwareNot DefinedNot Defined0.006750.04CVE-2022-30287
14/02/20214.84.6Horde Groupware Webmail Edition Text Filter Library Text2html.php preProcess Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.021660.00CVE-2021-26929
18/05/20205.24.6Horde Groupware Webmail Edition Image View Stored Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.001350.04CVE-2020-8035
23/03/20205.35.3Horde Groupware Webmail Edition add.php direitos alargadosGroupware SoftwareNot DefinedNot Defined0.004670.00CVE-2020-8866
23/03/20206.36.3Horde Groupware Webmail Edition edit.php Directório TraversalGroupware SoftwareNot DefinedNot Defined0.003330.03CVE-2020-8865
17/02/20208.58.5Horde Groupware Webmail Edition CSV Data direitos alargadosGroupware SoftwareNot DefinedNot Defined0.964920.00CVE-2020-8518
05/11/20195.45.1Horde Groupware Webmail Edition basic.php Falsificação de Pedido Cross SiteGroupware SoftwareProof-of-ConceptOfficial Fix0.032800.02CVE-2013-6275
05/11/20194.84.3Horde Groupware Webmail Edition Permission edit.php Falsificação de Pedido Cross SiteGroupware SoftwareProof-of-ConceptNot Defined0.001970.00CVE-2013-6365
05/11/20196.55.9Horde Groupware Webmail Edition Virtual Address Book search.php Falsificação de Pedido Cross SiteGroupware SoftwareProof-of-ConceptNot Defined0.004590.00CVE-2013-6364
24/10/20196.56.5Horde Groupware Webmail Edition Trean Falsificação de Pedido Cross SiteGroupware SoftwareProof-of-ConceptNot Defined0.049100.00CVE-2019-12095
24/10/20195.25.2Horde Groupware Webmail Edition Tag Cloud Roteiro Cruzado de SítiosGroupware SoftwareProof-of-ConceptNot Defined0.007530.02CVE-2019-12094
29/05/20197.57.5Horde Groupware Webmail Edition Image Upload Type.php onSubmit direitos alargadosGroupware SoftwareNot DefinedNot Defined0.944910.02CVE-2019-9858
04/04/20176.96.7Horde Groupware Webmail Edition Horde_Crypt direitos alargadosGroupware SoftwareNot DefinedOfficial Fix0.001810.00CVE-2017-7414
04/04/20177.57.4Horde Groupware Webmail Edition Horde_Crypt direitos alargadosGroupware SoftwareNot DefinedOfficial Fix0.947730.03CVE-2017-7413
13/04/20166.15.9Horde Groupware Webmail Edition _menubar.html.php Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.005340.00CVE-2016-2228
13/04/20166.15.9Horde Groupware Webmail Edition Html.php _renderVarInput_number Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.004340.00CVE-2015-8807
19/11/20154.33.9Horde Groupware cmdshell.php Falsificação de Pedido Cross SiteGroupware SoftwareProof-of-ConceptOfficial Fix0.007290.00CVE-2015-7984
18/11/20155.44.7Horde Groupware cmdshell.php Falsificação de Pedido Cross SiteGroupware SoftwareProof-of-ConceptOfficial Fix0.007290.00CVE-2015-7984
07/07/20144.34.1Horde IMP Flag/Mailbox Roteiro Cruzado de SítiosGroupware SoftwareHighOfficial Fix0.001730.02CVE-2014-4946
07/07/20144.34.1Horde IMP Mailbox/Message View Roteiro Cruzado de SítiosGroupware SoftwareHighOfficial Fix0.001730.00CVE-2014-4945
03/06/20147.36.4Horde Webmail Horde_ldap Fraca autenticaçãoGroupware SoftwareUnprovenOfficial Fix0.008290.00CVE-2014-3999
05/04/20144.34.1Horde Groupware Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.001360.02CVE-2012-6640
05/04/20144.34.1Horde Groupware Portal Blocks Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.003160.00CVE-2012-5567
05/04/20144.34.1Horde Groupware Roteiro Cruzado de SítiosGroupware SoftwareNot DefinedOfficial Fix0.002540.00CVE-2012-5565
31/03/20145.34.7Horde Webmail Redirect go.php direitos alargadosGroupware SoftwareProof-of-ConceptUnavailable0.000000.02

91 as entradas adicionais não são mais exibidas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!