Zarafa

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Zarafa records in CISA KEV

No Zarafa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zarafa 6 records LOW Webapp 4 records LOW Zarafa Collaboration Platform 4 records LOW Webaccess 2 records LOW

Records

2 records in Webaccess · all components

TI-2019-05115 CVE-2019-7219 · GHSA-vf2v-q584-6v5p

Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791…

LOW 35

Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.05218 Published 2019-04-11 No fix listed CWE-79

TI-2014-04447 CVE-2014-5449 · GHSA-jc9x-3ccm-v3m6

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their…

LOW 11

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00371 Published 2014-10-20 No fix listed CWE-200

Open these records in search →

Critical	0
High	2
Medium	6
Low	4
No CVSS	0