Horde Gollem vulnerabilities

2 CVEs affecting Horde Gollem, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8034, published 2020-05-18.

More from Horde.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-3447, published 2011-04-04. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a…
• CVE-2020-8034, published 2020-05-18. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the…