Egroupware vulnerabilities

Products

• Egroupware 26
• Enterprise Line 4

Newest

• egroupware Authenticated RCE via Malicious eTemplate Upload in EGroupware CVE-2026-40187 Fix available 8.6 HighJuly 7, 2026
• egroupware Remote Code Execution Vulnerability in EGroupware CVE-2026-27823 Fix available 8.7 HighJuly 7, 2026
• egroupware EGroupware has SQL Injection in Nextmatch Filter Processing CVE-2026-22243 Public exploitFix available 8.7 HighJanuary 28, 2026
• egroupware An issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected (XSS)... CVE-2023-38329 6.1 MediumJuly 11, 2025
• egroupware An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists... CVE-2023-38327 5.3 MediumJuly 11, 2025
• egroupware EGroupware mishandles an ORDER BY clause CVE-2024-40614 Fix available 9.8 CriticalJuly 7, 2024
• egroupware An issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability... CVE-2023-38328 4.9 MediumOctober 26, 2023
• egroupware eGroupware Community Edition Stored XSS vulnerability CVE-2017-14920 Fix available 6.1 MediumSeptember 29, 2017
• egroupware EGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edition before 1.8.007... CVE-2014-2988 8.5 HighOctober 27, 2014
• egroupware Multiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL)... CVE-2014-2987 Public exploit 6.8 MediumOctober 26, 2014
• egroupware eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection... CVE-2014-2027 Fix available 7.5 HighMarch 3, 2014
• egroupware Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware... CVE-2012-2211 4.3 MediumNovember 22, 2012
• egroupware, egroupware enterprise line +1 more Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before... CVE-2011-4951 5.8 MediumAugust 31, 2012
• egroupware, egroupware enterprise line +1 more Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware... CVE-2011-4950 4.3 MediumAugust 31, 2012
• egroupware, egroupware enterprise line +1 more SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in... CVE-2011-4949 7.5 HighAugust 31, 2012
• egroupware, egroupware enterprise line +1 more Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before... CVE-2011-4948 5.0 MediumAugust 31, 2012
• egroupware Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002... CVE-2010-3314 Public exploit 4.3 MediumMarch 11, 2010
• egroupware EGroupware Code Injection vulnerability CVE-2010-3313 Public exploitFix available 7.5 HighMarch 11, 2010
• egroupware Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors... CVE-2008-2041 10.0 HighApril 30, 2008
• egroupware, moodle +1 more Moodle vulnerable to Cross-site scripting CVE-2008-1502 Fix available EPSS 10.5% 4.3 MediumMarch 25, 2008
• egroupware Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers... CVE-2007-5091 4.3 MediumSeptember 26, 2007
• egroupware Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors... CVE-2007-3155 10.0 HighJune 11, 2007
• egroupware Unspecified vulnerability in Walter Zorn wz_tooltip.js (aka wz_tooltips) before 4.01, as used by... CVE-2007-3154 10.0 HighJune 11, 2007
• egroupware Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote... CVE-2005-1203 Public exploit 7.5 HighApril 21, 2005
• egroupware Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote... CVE-2005-1202 Public exploit 6.8 MediumApril 21, 2005
• egroupware Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow... CVE-2004-1467 Public exploit 4.3 MediumDecember 31, 2004