Vulnerability Details CVE-2010-0463
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.2%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2010-0463
-
-
-
cpe:2.3:a:horde:imp:2.2.1
-
cpe:2.3:a:horde:imp:2.2.2
-
cpe:2.3:a:horde:imp:2.2.3
-
cpe:2.3:a:horde:imp:2.2.4
-
cpe:2.3:a:horde:imp:2.2.5
-
cpe:2.3:a:horde:imp:2.2.6
-
cpe:2.3:a:horde:imp:2.2.7
-
cpe:2.3:a:horde:imp:2.2.8
-
-
-
-
cpe:2.3:a:horde:imp:3.1.2
-
-
cpe:2.3:a:horde:imp:3.2.1
-
cpe:2.3:a:horde:imp:3.2.2
-
cpe:2.3:a:horde:imp:3.2.3
-
cpe:2.3:a:horde:imp:3.2.4
-
cpe:2.3:a:horde:imp:3.2.5
-
cpe:2.3:a:horde:imp:3.2.6
-
cpe:2.3:a:horde:imp:3.2.7
-
-
cpe:2.3:a:horde:imp:4.0.1
-
cpe:2.3:a:horde:imp:4.0.2
-
cpe:2.3:a:horde:imp:4.0.3
-
cpe:2.3:a:horde:imp:4.0.4
-
cpe:2.3:a:horde:imp:4.1.3
-
cpe:2.3:a:horde:imp:4.1.5
-
cpe:2.3:a:horde:imp:4.1.6
-
-
cpe:2.3:a:horde:imp:4.2.1
-
cpe:2.3:a:horde:imp:4.2.2
-
-
cpe:2.3:a:horde:imp:4.3.1
-
cpe:2.3:a:horde:imp:4.3.2
-
cpe:2.3:a:horde:imp:4.3.3
-
cpe:2.3:a:horde:imp:4.3.4
-
cpe:2.3:a:horde:imp:4.3.5
-
cpe:2.3:a:horde:imp:4.3.6