Vendor
Horde
118 known vulnerabilities in products by Horde, 0 of them actively exploited (CISA KEV).
Key figures
118
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-8518 | Horde Groupware: Remote Code Execution | 9.8 | |
| High | CVE-2026-60102 | Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver | 8.8 | |
| High | CVE-2017-7413 | Horde Groupware: OS Command Injection | 8.8 | |
| High | CVE-2025-30349 | Horde IMP: Cross-site Scripting | 7.2 | |
| High | CVE-2022-30287 | Horde Groupware: Deserialization of Untrusted Data | 8.0 | |
| High | CVE-2019-9858 | Horde Groupware: Remote Code Execution | 8.8 | |
| High | CVE-2017-15235 | Horde Groupware: security vulnerability | 7.5 | |
| High | CVE-2017-14650 | Horde Image API: Remote Code Execution | 8.1 | |
| Medium | CVE-2020-8865 | Horde Groupware Webmail Edition: Relative Path Traversal | 6.3 | |
| High | CVE-2017-9774 | Horde Image API: Remote Code Execution | 8.8 | |
| Medium | CVE-2021-26929 | Horde Groupware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2017-17688 | Apple Mail for iPhone OS: security vulnerability | 5.9 | |
| High | CVE-2013-6364 | Horde Groupware: Cross-Site Scripting (XSS) | 8.8 | |
| High | CVE-2014-3999 | Horde Ldap: Authentication Bypass | 8.1 | |
| Medium | CVE-2017-17689 | Microsoft Outlook: security vulnerability | 5.9 | |
| Medium | CVE-2020-8866 | Horde Groupware Webmail Edition: Unrestricted Upload of File with Dangerous Type | 4.3 | |
| Medium | CVE-2013-6275 | Horde Groupware: Cross-Site Request Forgery (CSRF) | 6.5 | |
| Medium | CVE-2015-8807 | Horde Groupware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2016-2228 | Horde Groupware: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2019-12095 | Horde Groupware: Cross-Site Scripting (XSS) | 8.8 | |
| Not rated | CVE-2012-0209 | Horde Groupware: security vulnerability | — | |
| Not rated | CVE-2014-1691 | Horde Application Framework: security vulnerability | — | |
| Not rated | CVE-2006-1491 | Horde Application Framework: Code Execution | — | |
| Medium | CVE-2002-2024 | Horde IMP: security vulnerability | 5.3 | |
| Not rated | CVE-2003-0025 | Horde IMP: SQL Injection | — |
Products
| Horde Groupware | 46 | 0 |
| Horde IMP | 24 | 0 |
| Horde | 18 | 0 |
| Horde Groupware Webmail Edition | 12 | 0 |
| Horde Application Framework | 9 | 0 |
| Application Framework | 8 | 0 |
| Horde Kronolith | 3 | 0 |
| Horde Kronolith H4 | 3 | 0 |
| Kronolith H3 | 3 | 0 |
| Turba H3 | 3 | 0 |