CVE-2014-4945
Summary
| CVE | CVE-2014-4945 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-07-14 14:55:07 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via an unspecified flag in the basic (1) mailbox or (2) message view. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Horde | Groupware | 5.0.0 | All | All | All |
| Application | Horde | Groupware | 5.0.0 | rc1 | All | All |
| Application | Horde | Groupware | 5.0.1 | All | All | All |
| Application | Horde | Groupware | 5.0.2 | All | All | All |
| Application | Horde | Groupware | 5.0.3 | All | All | All |
| Application | Horde | Groupware | 5.0.4 | All | All | All |
| Application | Horde | Groupware | 5.0.5 | All | All | All |
| Application | Horde | Groupware | 5.1.0 | All | All | All |
| Application | Horde | Groupware | 5.1.0 | rc1 | All | All |
| Application | Horde | Groupware | 5.1.1 | All | All | All |
| Application | Horde | Groupware | 5.1.2 | All | All | All |
| Application | Horde | Groupware | 5.1.3 | All | All | All |
| Application | Horde | Groupware | All | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | alpha1 | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | beta1 | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | beta2 | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | beta3 | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | beta4 | All | All |
| Application | Horde | Internet Mail Program | 6.0.0 | rc1 | All | All |
| Application | Horde | Internet Mail Program | 6.0.1 | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.2 | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.3 | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.4 | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.5 | All | All | All |
| Application | Horde | Internet Mail Program | 6.0.6 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.0 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.0 | beta1 | All | All |
| Application | Horde | Internet Mail Program | 6.1.0 | beta2 | All | All |
| Application | Horde | Internet Mail Program | 6.1.0 | rc1 | All | All |
| Application | Horde | Internet Mail Program | 6.1.1 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.2 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.3 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.4 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.5 | All | All | All |
| Application | Horde | Internet Mail Program | 6.1.6 | All | All | All |
| Application | Horde | Internet Mail Program | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| horde/CHANGES at c0144ac03814a8c2cf6fc5ac0d1af2653e9ee139 · horde/horde · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| [announce] [SECURITY] Horde Groupware Webmail Edition 5.1.5 (final) | af854a3a-2127-422b-91ae-364da2661108 | lists.horde.org | Vendor Advisory |
| [announce] [SECURITY] IMP 6.1.8 (final) | af854a3a-2127-422b-91ae-364da2661108 | lists.horde.org | Vendor Advisory |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| horde/CHANGES at 4513649810f13a32f1193bdeed76f7d85a5efa05 · horde/horde · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.