CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12095

Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2019-12095

Horde » Groupware » Version: 1.0

cpe:2.3:a:horde:groupware:1.0
Horde » Groupware » Version: 1.0.1

cpe:2.3:a:horde:groupware:1.0.1
Horde » Groupware » Version: 1.0.2

cpe:2.3:a:horde:groupware:1.0.2
Horde » Groupware » Version: 1.0.3

cpe:2.3:a:horde:groupware:1.0.3
Horde » Groupware » Version: 1.0.4

cpe:2.3:a:horde:groupware:1.0.4
Horde » Groupware » Version: 1.0.5

cpe:2.3:a:horde:groupware:1.0.5
Horde » Groupware » Version: 1.0.6

cpe:2.3:a:horde:groupware:1.0.6
Horde » Groupware » Version: 1.0.7

cpe:2.3:a:horde:groupware:1.0.7
Horde » Groupware » Version: 1.0.8

cpe:2.3:a:horde:groupware:1.0.8
Horde » Groupware » Version: 1.1

cpe:2.3:a:horde:groupware:1.1
Horde » Groupware » Version: 1.1.1

cpe:2.3:a:horde:groupware:1.1.1
Horde » Groupware » Version: 1.1.2

cpe:2.3:a:horde:groupware:1.1.2
Horde » Groupware » Version: 1.1.3

cpe:2.3:a:horde:groupware:1.1.3
Horde » Groupware » Version: 1.1.4

cpe:2.3:a:horde:groupware:1.1.4
Horde » Groupware » Version: 1.1.5

cpe:2.3:a:horde:groupware:1.1.5
Horde » Groupware » Version: 1.1.6

cpe:2.3:a:horde:groupware:1.1.6
Horde » Groupware » Version: 1.2

cpe:2.3:a:horde:groupware:1.2
Horde » Groupware » Version: 1.2.1

cpe:2.3:a:horde:groupware:1.2.1
Horde » Groupware » Version: 1.2.10

cpe:2.3:a:horde:groupware:1.2.10
Horde » Groupware » Version: 1.2.2

cpe:2.3:a:horde:groupware:1.2.2
Horde » Groupware » Version: 1.2.3

cpe:2.3:a:horde:groupware:1.2.3
Horde » Groupware » Version: 1.2.4

cpe:2.3:a:horde:groupware:1.2.4
Horde » Groupware » Version: 1.2.5

cpe:2.3:a:horde:groupware:1.2.5
Horde » Groupware » Version: 1.2.6

cpe:2.3:a:horde:groupware:1.2.6
Horde » Groupware » Version: 1.2.7

cpe:2.3:a:horde:groupware:1.2.7
Horde » Groupware » Version: 1.2.8

cpe:2.3:a:horde:groupware:1.2.8
Horde » Groupware » Version: 1.2.9

cpe:2.3:a:horde:groupware:1.2.9
Horde » Groupware » Version: 4.0

cpe:2.3:a:horde:groupware:4.0
Horde » Groupware » Version: 4.0.1

cpe:2.3:a:horde:groupware:4.0.1
Horde » Groupware » Version: 4.0.2

cpe:2.3:a:horde:groupware:4.0.2
Horde » Groupware » Version: 4.0.3

cpe:2.3:a:horde:groupware:4.0.3
Horde » Groupware » Version: 4.0.4

cpe:2.3:a:horde:groupware:4.0.4
Horde » Groupware » Version: 4.0.5

cpe:2.3:a:horde:groupware:4.0.5
Horde » Groupware » Version: 4.0.6

cpe:2.3:a:horde:groupware:4.0.6
Horde » Groupware » Version: 4.0.7

cpe:2.3:a:horde:groupware:4.0.7
Horde » Groupware » Version: 4.0.8

cpe:2.3:a:horde:groupware:4.0.8
Horde » Groupware » Version: 5.0.0

cpe:2.3:a:horde:groupware:5.0.0
Horde » Groupware » Version: 5.0.1

cpe:2.3:a:horde:groupware:5.0.1
Horde » Groupware » Version: 5.0.2

cpe:2.3:a:horde:groupware:5.0.2
Horde » Groupware » Version: 5.0.3

cpe:2.3:a:horde:groupware:5.0.3
Horde » Groupware » Version: 5.0.4

cpe:2.3:a:horde:groupware:5.0.4
Horde » Groupware » Version: 5.0.5

cpe:2.3:a:horde:groupware:5.0.5
Horde » Groupware » Version: 5.1.0

cpe:2.3:a:horde:groupware:5.1.0
Horde » Groupware » Version: 5.1.1

cpe:2.3:a:horde:groupware:5.1.1
Horde » Groupware » Version: 5.1.2

cpe:2.3:a:horde:groupware:5.1.2
Horde » Groupware » Version: 5.1.3

cpe:2.3:a:horde:groupware:5.1.3
Horde » Groupware » Version: 5.1.4

cpe:2.3:a:horde:groupware:5.1.4
Horde » Groupware » Version: 5.1.5

cpe:2.3:a:horde:groupware:5.1.5
Horde » Groupware » Version: 5.2.0

cpe:2.3:a:horde:groupware:5.2.0
Horde » Groupware » Version: 5.2.1

cpe:2.3:a:horde:groupware:5.2.1
Horde » Groupware » Version: 5.2.10

cpe:2.3:a:horde:groupware:5.2.10
Horde » Groupware » Version: 5.2.11

cpe:2.3:a:horde:groupware:5.2.11
Horde » Groupware » Version: 5.2.12

cpe:2.3:a:horde:groupware:5.2.12
Horde » Groupware » Version: 5.2.13

cpe:2.3:a:horde:groupware:5.2.13
Horde » Groupware » Version: 5.2.14

cpe:2.3:a:horde:groupware:5.2.14
Horde » Groupware » Version: 5.2.15

cpe:2.3:a:horde:groupware:5.2.15
Horde » Groupware » Version: 5.2.16

cpe:2.3:a:horde:groupware:5.2.16
Horde » Groupware » Version: 5.2.17

cpe:2.3:a:horde:groupware:5.2.17
Horde » Groupware » Version: 5.2.18

cpe:2.3:a:horde:groupware:5.2.18
Horde » Groupware » Version: 5.2.19

cpe:2.3:a:horde:groupware:5.2.19
Horde » Groupware » Version: 5.2.2

cpe:2.3:a:horde:groupware:5.2.2
Horde » Groupware » Version: 5.2.20

cpe:2.3:a:horde:groupware:5.2.20
Horde » Groupware » Version: 5.2.21

cpe:2.3:a:horde:groupware:5.2.21
Horde » Groupware » Version: 5.2.22

cpe:2.3:a:horde:groupware:5.2.22
Horde » Groupware » Version: 5.2.3

cpe:2.3:a:horde:groupware:5.2.3
Horde » Groupware » Version: 5.2.4

cpe:2.3:a:horde:groupware:5.2.4
Horde » Groupware » Version: 5.2.5

cpe:2.3:a:horde:groupware:5.2.5
Horde » Groupware » Version: 5.2.6

cpe:2.3:a:horde:groupware:5.2.6
Horde » Groupware » Version: 5.2.7

cpe:2.3:a:horde:groupware:5.2.7
Horde » Groupware » Version: 5.2.8

cpe:2.3:a:horde:groupware:5.2.8
Horde » Groupware » Version: 5.2.9

cpe:2.3:a:horde:groupware:5.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12095

Products

Pricing

Contact Us