Tine20

tine20

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-1000164 1Tine20 1Tine 2.0 May 13, 2026 Nov 17, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation
CVE-2017-14923 1Tine20 1Tine 2.0 May 13, 2026 Sep 30, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application admi...Show more Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.Show less
CVE-2017-14922 1Tine20 1Tine 2.0 May 13, 2026 Sep 30, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rend...Show more Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.Show less
CVE-2017-14921 1Tine20 1Tine 2.0 May 13, 2026 Sep 30, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the applicat...Show more Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.Show less