Horde vulnerabilities
7 published CVEs name Horde among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-65053
Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name
horde · imp
Medium5.1 - CVE-2026-60102
Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver
horde · Vfs
High7.7 - CVE-2026-58451
Horde IMP < 7.0.1 Path Traversal via Compose.php img src
horde · imp
High7.1 - CVE-2025-41066
Disclosure of sensitive information in Horde Groupware
Horde · Groupware
Medium6.9 - CVE-2025-30349
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail…
Horde · IMP
High7.2 - CVE-2020-8866
This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is…
Horde · Groupware Webmail Edition
Medium4.3 - CVE-2020-8865
This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is…
Horde · Groupware Webmail Edition
Medium6.3