CVE-2008-7218: horde groupware
Vulnerability summary
CVE-2008-7218 is a high (CVSS 10.0) vulnerability in horde groupware. EPSS estimates a 2.20% chance of exploitation in the next 30 days, higher than 82.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 13-09-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.20%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.20% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Horde7 products
- groupware1.0 | 1.0.1 | 1.0.2 | 1.1
- groupware_webmail_edition1.0 | 1.0.2 | 1.0.3 | 1.1
- horde3.1 | 3.1.1 | 3.1.2 | 3.1.3 | 3.1.4 | 3.1.5 | 3.2
- kronolith_h32.1 | 2.1.1 | 2.1.2 | 2.1.3 | 2.1.4 | 2.1.5 | 2.1.6 | 2.2
- mnemo_h32.1 | 2.1.1 | 2.2
1 vendor · 7 products
References
19 links- www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.htmlVendor AdvisoryX Refsource FEDORA