Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3650
HistoryAug 13, 2008 - 12:00 a.m.

CVE-2008-3650

2008-08-1300:00:00
ubuntu.com
ubuntu.com
10

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

0.004

Percentile

73.9%

Multiple unspecified vulnerabilities in Horde Groupware Webmail before
Edition 1.1.1 (final) have unknown impact and attack vectors related to
“unescaped output,” possibly cross-site scripting (XSS), in the (1) object
browser and (2) contact view.

Notes

Author Note
mdeslaur this is a dupe of CVE-2008-3330, ignoring turba2 code introduced in 2.2.0

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

0.004

Percentile

73.9%