Application Framework
Vendor:
First CVE: Dec 31, 2004 · Active for 21 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
4.7
Avg CVSS
Higher Avg CVSS than 6% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Application Framework over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 2004
21 years ago
Most Recent CVE
Dec 21, 2009
6,059 days ago
CVE Severity & Scoring
Application Framework8 CVEs
88%
13%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown8 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown8 (100.0%)
User Interaction
None0 (0.0%)
Unknown8 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown8 (100.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-1491HIGH Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer. | Mar 29, 2006 | 7.5 | 49 | NO | YES |
CVE-2009-3701MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware W | Dec 21, 2009 | 4.3 | 25 | NO | YES |
CVE-2009-4363MEDIUM Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not prope | Dec 21, 2009 | 4.3 | 16 | NO | NO |
CVE-2009-3236MEDIUM The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1 | Sep 17, 2009 | 4.3 | 16 | NO | NO |
CVE-2008-5917MEDIUM Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used | Jan 21, 2009 | 4.3 | 14 | NO | NO |
CVE-2006-4256MEDIUM index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the ur | Aug 21, 2006 | 4.3 | 14 | NO | NO |
CVE-2005-0961MEDIUM Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title. | May 2, 2005 | 4.3 | 14 | NO | NO |
CVE-2004-2741MEDIUM Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the | Dec 31, 2004 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
25.0% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Application Framework
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.3.4 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.3.3 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.3.2 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.3.1 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.3 | 4 | 4.3 | 2.5% | 0 | 1 |
| 3.2.4 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.2.3 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.2.2 | 4 | 4.3 | 2.5% | 0 | 1 |
| 3.2.1 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.2 | 3 | 4.3 | 2.8% | 0 | 1 |
| 3.1.1 | 3 | 4.3 | 2.6% | 0 | 1 |
| 3.1 | 4 | 5.1 | 11.6% | 0 | 2 |
| 3.0.9 | 4 | 5.1 | 11.6% | 0 | 2 |
| 3.0.8 | 4 | 5.1 | 11.6% | 0 | 2 |
| 3.0.7 | 4 | 5.1 | 11.6% | 0 | 2 |
| 3.0.6 | 4 | 5.1 | 11.6% | 0 | 2 |
| 3.0.4_rc2 | 2 | 5.9 | 20.1% | 0 | 1 |
| 3.0.4_rc1 | 3 | 5.4 | 13.8% | 0 | 1 |
| 3.0.4 | 4 | 5.1 | 11.6% | 0 | 2 |
| 3.0.3 | 4 | 5.1 | 11.6% | 0 | 2 |