groupware core vulnerabilities and fixes

Q: How do I fix groupware core vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is groupware core being exploited right now?

None of the tracked groupware core CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which groupware core CVE should I patch first?

CVE-2022-26562 currently ranks highest (65/100): An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attac.

Recent CVEs affecting groupware core, with upgrade or downgrade steps. 2 tracked.

Also searched as: groupwarecore.

groupware core has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-01. Highest priority: CVE-2022-26562 (score 65/100).

CVE-2022-26562 CRITICAL 9.8 DOWNGRADE An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attac
CVE-2021-28994 HIGH 7.5 UPGRADE UPGRADE kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10

FAQ

How do I fix groupware core vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is groupware core being exploited right now?

None of the tracked groupware core CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which groupware core CVE should I patch first?

CVE-2022-26562 currently ranks highest (65/100): An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attac.

← Back to latest CVEs