Known Vulnerabilities for Groupware by Horde
Listed below are 10 of the newest known vulnerabilities associated with "Groupware" by "Horde".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45551 json | Group-Office is an enterprise customer relationship management and groupware tool. Prior to 26.0.25, 25.0.100, and 6.8.165, G... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2022-30287 json | Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate... | 8 - HIGH | 2022-07-28 | 2023-08-08 |
| CVE-2021-26929 json | An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3... | 6.1 - MEDIUM | 2021-02-14 | 2021-04-19 |
| CVE-2020-8866 json | This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edi... | 6.5 - MEDIUM | 2020-03-23 | 2022-10-07 |
| CVE-2020-8865 json | This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Ed... | 6.3 - MEDIUM | 2020-03-23 | 2022-10-07 |
| CVE-2020-8518 json | Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution. | 9.8 - CRITICAL | 2020-02-17 | 2023-11-07 |
| CVE-2020-8035 json | The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (X... | 6.1 - MEDIUM | 2020-05-18 | 2020-06-01 |
| CVE-2020-8034 json | Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-... | 6.1 - MEDIUM | 2020-05-18 | 2020-05-31 |
| CVE-2019-12095 json | Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by th... | 8.8 - HIGH | 2019-10-24 | 2020-08-24 |
| CVE-2019-12094 json | Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f&user_name= or admin/user.php?fo... | 6.1 - MEDIUM | 2019-10-24 | 2019-12-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Horde | Groupware | 5.2.9 | |||
| Application | Horde | Groupware | 5.2.9 | |||
| Application | Horde | Groupware | 5.2.8 | |||
| Application | Horde | Groupware | 5.2.8 | |||
| Application | Horde | Groupware | 5.2.7 | |||
| Application | Horde | Groupware | 5.2.7 | |||
| Application | Horde | Groupware | 5.2.6 | |||
| Application | Horde | Groupware | 5.2.6 | |||
| Application | Horde | Groupware | 5.2.5 | |||
| Application | Horde | Groupware | 5.2.5 | |||
| Application | Horde | Groupware | 5.2.4 | |||
| Application | Horde | Groupware | 5.2.4 | |||
| Application | Horde | Groupware | 5.2.3 | |||
| Application | Horde | Groupware | 5.2.3 | |||
| Application | Horde | Groupware | 5.2.23 | |||
| Application | Horde | Groupware | 5.2.22 | |||
| Application | Horde | Groupware | 5.2.22 | |||
| Application | Horde | Groupware | 5.2.22 | |||
| Application | Horde | Groupware | 5.2.21 | |||
| Application | Horde | Groupware | 5.2.21 |