Kolab Groupware Server

Vendor:

First CVE: May 5, 2004 · Active for 22 years

4
Total CVEs
More Total CVEs than 75% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
4.9
Avg CVSS
Higher Avg CVSS than 8% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Kolab Groupware Server over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 5, 2004
22 years ago
Most Recent CVE
Sep 22, 2008
6,518 days ago

CVE Severity & Scoring

Kolab Groupware Server4 CVEs
All CVEs353,173 CVEs
Medium
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown4 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown4 (100.0%)
User Interaction
None0 (0.0%)
Unknown4 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown4 (100.0%)

Top CVEs

Signals from CVEs in this product scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear
Dec 31, 20056.417NONO
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtai
Sep 22, 20084.014NONO
Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the po
Jan 14, 20064.614NONO
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.
May 5, 20044.614NONO

Exploit Exposure

Signals from CVEs in this product scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (4 CVEs).

Media Mentions

Signals from CVEs in this product scope (4 CVEs).

Top CNAs Publishing CVEs For Kolab Groupware Server

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.0.214.60.3%00
2.0.125.50.8%00
2.0.016.41.2%00
1.0.814.60.4%00
1.0.714.60.4%00
1.0.614.60.4%00
1.0.514.60.4%00
1.0.314.60.4%00
1.0.114.60.4%00
1.0.014.01.0%00
1.014.60.4%00