Skip to content
Noroxi

EGroupware records

25 published records for vendor egroupware.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
24%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2007-3154
    41Plan

    Unspecified vulnerability in Walter Zorn wz_tooltip.js (aka wz_tooltips) before 4.01, as used by eGroupWare before 1.2.107-2 and other packa

    CriticalCVSS 10.0No exploitEPSS 1%

    egroupware · egroupwareJun 11, 2007

  • CVE-2007-3155
    41Plan

    Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb.

    CriticalCVSS 10.0No exploitEPSS 1%

    egroupware · egroupwareJun 11, 2007

  • CVE-2008-2041
    40Plan

    Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors and "grave" impact when the web server has

    CriticalCVSS 10.0No exploitEPSS 1%

    egroupware · egroupwareApr 30, 2008

  • CVE-2024-40614
    39Monitor

    EGroupware before 23.1.20240624 mishandles an ORDER BY clause.

    CriticalCVSS 9.8No exploitEPSS 0%

    egroupware · egroupwareJul 7, 2024

  • CVE-2014-2988
    35Monitor

    EGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edition before 1.8.007.20140506, and EGroupware before 14.1 beta

    HighCVSS 8.5No exploitEPSS 1%

    egroupware · egroupwareOct 26, 2014

  • CVE-2026-22243
    34Monitor

    EGroupware has SQL Injection in Nextmatch Filter Processing

    HighCVSS 8.7Proof of conceptEPSS 0%

    egroupware · egroupwareJan 28, 2026

  • CVE-2010-3313
    33Monitor

    phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 an

    HighCVSS 7.5Proof of conceptEPSS 8%

    egroupware · egroupwareSep 22, 2010

  • CVE-2014-2027
    31Monitor

    eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly exe

    HighCVSS 7.5No exploitEPSS 4%

    egroupware · egroupwareMar 31, 2015

  • CVE-2005-1203
    31Monitor

    Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 3%

    egroupware · egroupwareMay 2, 2005

  • CVE-2011-4949
    30Monitor

    SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in EGroupware Enterprise Line (EPL) before 11.1.201108

    HighCVSS 7.5No exploitEPSS 1%

    egroupware · egroupwareAug 31, 2012

  • CVE-2005-1202
    28Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or

    MediumCVSS 6.8Proof of conceptEPSS 2%

    egroupware · egroupwareMay 2, 2005

  • CVE-2014-2987
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edi

    MediumCVSS 6.8Proof of conceptEPSS 1%

    egroupware · egroupwareOct 26, 2014

  • CVE-2017-14920
    24Monitor

    Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript

    MediumCVSS 6.1No exploitEPSS 1%

    egroupware · egroupwareSep 29, 2017

  • CVE-2023-38329
    24Monitor

    An issue was discovered in eGroupWare 17.1.20190111.

    MediumCVSS 6.1No exploitEPSS 0%

    egroupware · egroupwareJul 11, 2025

  • CVE-2011-4951
    23Monitor

    Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community E

    MediumCVSS 5.8No exploitEPSS 1%

    egroupware · egroupwareAug 31, 2012

  • CVE-2011-4948
    21Monitor

    Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Ed

    MediumCVSS 5.0No exploitEPSS 2%

    egroupware · egroupwareAug 31, 2012

  • CVE-2023-38327
    21Monitor

    An issue was discovered in eGroupWare 17.1.20190111.

    MediumCVSS 5.3No exploitEPSS 0%

    egroupware · egroupwareJul 11, 2025

  • CVE-2008-1502
    20Monitor

    The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and o

    MediumCVSS 4.3No exploitEPSS 10%

    egroupware · egroupwareMar 25, 2008

  • CVE-2023-38328
    19Monitor

    An issue was discovered in eGroupWare 17.1.20190111.

    MediumCVSS 4.9No exploitEPSS 0%

    egroupware · egroupwareOct 26, 2023

  • CVE-2004-1467
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web scri

    MediumCVSS 4.3Proof of conceptEPSS 3%

    egroupware · egroupwareDec 31, 2004

  • CVE-2010-3314
    18Monitor

    Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; a

    MediumCVSS 4.3Proof of conceptEPSS 3%

    egroupware · egroupwareSep 22, 2010

  • CVE-2011-4950
    17Monitor

    Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and E

    MediumCVSS 4.3No exploitEPSS 1%

    egroupware · egroupwareAug 31, 2012

  • CVE-2012-2211
    17Monitor

    Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware before 1.8.004.20120405 allows remote attack

    MediumCVSS 4.3No exploitEPSS 1%

    egroupware · egroupwareNov 22, 2012

  • CVE-2007-5091
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 4.3No exploitEPSS 1%

    egroupware · egroupwareSep 26, 2007

  • CVE-2005-1129
    8Monitor

    eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, whic

    LowCVSS 2.1No exploitEPSS 0%

    egroupware · egroupwareMay 2, 2005