EUVD-2014-9710

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Multiple cross-site scripting vulnerabilities in SOGo Web Calendar allow remote code injection.

Reporter	Title	Published	Views	Family All 11
CNVD	SOGo Web Calendar Code Injection Vulnerability	4 Aug 201600:00	–	cnvd
CVE	CVE-2014-9905	17 Feb 201717:00	–	cve
Cvelist	CVE-2014-9905	17 Feb 201717:00	–	cvelist
Debian CVE	CVE-2014-9905	17 Feb 201717:00	–	debiancve
NVD	CVE-2014-9905	17 Feb 201717:59	–	nvd
OpenVAS	SOGo < 2.2.0 Multiple XSS Vulnerabilities	11 Mar 201900:00	–	openvas
OSV	DEBIAN-CVE-2014-9905	17 Feb 201717:59	–	osv
Prion	Cross site scripting	17 Feb 201717:59	–	prion
Positive Technologies	PT-2017-6404 · Inverse · Sogo	17 Feb 201700:00	–	ptsecurity
SUSE CVE	SUSE CVE-2014-9905	15 Feb 202305:24	–	susecve

[
  {
    "enisaIdVendor": [
      {
        "id": "a9d9b978-89cb-3a65-a79a-5c8f3b8f32a4",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0c3dafef-63e5-3d95-ad52-76a816be97fa",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2014-9905.html
github	www.github.com/inverse-inc/sogo/commit/80a09407652ec04e8c9fb6cb48e1029e69a15765
openwall	www.openwall.com/lists/oss-security/2016/07/09/3
github	www.github.com/inverse-inc/sogo/commit/3a5e44e7eb8b390b67a8f8a83030b49606956501
github	www.github.com/inverse-inc/sogo/commit/c94595ea7f0f843c2d7abf25df039b2bbe707625
sogo	www.sogo.nu/bugs/view.php
github	www.github.com/inverse-inc/sogo/commit/1a7fc2a0e90a19dfb1fce292ae5ff53aa513ade9
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

CVSS 24.3

EPSS0.006