Skip to contentEgroupware Egroupware vulnerabilities
- egroupwareAuthenticated RCE via Malicious eTemplate Upload in EGroupwareCVE-2026-40187Fix available8.6 High
- egroupwareRemote Code Execution Vulnerability in EGroupwareCVE-2026-27823Fix available8.7 High
- egroupwareEGroupware has SQL Injection in Nextmatch Filter ProcessingCVE-2026-22243Public exploitFix available8.7 High
- egroupwareAn issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected (XSS)...CVE-2023-383296.1 Medium
- egroupwareAn issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists...CVE-2023-383275.3 Medium
- egroupwareEGroupware mishandles an ORDER BY clauseCVE-2024-40614Fix available9.8 Critical
- egroupwareAn issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability...CVE-2023-383284.9 Medium
- egroupwareeGroupware Community Edition Stored XSS vulnerabilityCVE-2017-14920Fix available6.1 Medium
- egroupwareEGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edition before 1.8.007...CVE-2014-29888.5 High
- egroupwareMultiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL)...CVE-2014-2987Public exploit6.8 Medium
- egroupwareeGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection...CVE-2014-2027Fix available7.5 High
- egroupwareCross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware...CVE-2012-22114.3 Medium
- egroupware, egroupware enterprise line +1 moreOpen redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before...CVE-2011-49515.8 Medium
- egroupware, egroupware enterprise line +1 moreCross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware...CVE-2011-49504.3 Medium
- egroupware, egroupware enterprise line +1 moreSQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in...CVE-2011-49497.5 High
- egroupware, egroupware enterprise line +1 moreDirectory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before...CVE-2011-49485.0 Medium
- egroupwareCross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002...CVE-2010-3314Public exploit4.3 Medium
- egroupwareEGroupware Code Injection vulnerabilityCVE-2010-3313Public exploitFix available7.5 High
- egroupwareMultiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors...CVE-2008-204110.0 High
- egroupware, moodle +1 moreMoodle vulnerable to Cross-site scriptingCVE-2008-1502Fix availableEPSS 10.5%4.3 Medium
- egroupwareMultiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers...CVE-2007-50914.3 Medium
- egroupwareUnspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors...CVE-2007-315510.0 High
- egroupwareUnspecified vulnerability in Walter Zorn wz_tooltip.js (aka wz_tooltips) before 4.01, as used by...CVE-2007-315410.0 High
- egroupwareMultiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote...CVE-2005-1203Public exploit7.5 High
- egroupwareMultiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote...CVE-2005-1202Public exploit6.8 Medium
- egroupwareMultiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow...CVE-2004-1467Public exploit4.3 Medium