Horde

Records118All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

Horde records in CISA KEV

No Horde vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Groupware 46 records HIGH Imp 21 records MEDIUM Horde 18 records HIGH Groupware Webmail Edition 10 records MEDIUM Horde Application Framework 9 records MEDIUM Application Framework 8 records MEDIUM Kronolith 3 records LOW Kronolith H3 3 records MEDIUM

Records

3 records in Kronolith · all components

TI-2006-05939 CVE-2006-6175 · GHSA-3ffm-vqmq-r4hx

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7…

LOW 37

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0234 Published 2006-11-30 No fix listed

TI-2008-02658 CVE-2008-2783 · GHSA-598g-8pp7-hcwv

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01505 Published 2008-06-19 No fix listed CWE-79

TI-2005-01240 CVE-2005-1314 · GHSA-m7vw-f6mg-63gp

Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01228 Published 2005-04-27 No fix listed

Open these records in search →

Critical	5
High	20
Medium	88
Low	5
No CVSS	0