Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3650
HistoryAug 13, 2008 - 12:00 a.m.

CVE-2008-3650

2008-08-1300:00:00
ubuntu.com
ubuntu.com
8

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.0%

Multiple unspecified vulnerabilities in Horde Groupware Webmail before
Edition 1.1.1 (final) have unknown impact and attack vectors related to
“unescaped output,” possibly cross-site scripting (XSS), in the (1) object
browser and (2) contact view.

Notes

Author Note
mdeslaur this is a dupe of CVE-2008-3330, ignoring turba2 code introduced in 2.2.0

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.0%