Read the docs

Zarafa

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Zarafa records in CISA KEV

No Zarafa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zarafa 6 records LOW Webapp 4 records LOW Zarafa Collaboration Platform 4 records LOW Webaccess 2 records LOW

Records

4 records in Zarafa Collaboration Platform · all components

TI-2014-07692 CVE-2014-9465 · GHSA-54r8-748f-4vmf

senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration…

Priority LOW 29

senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03355 Published 2015-02-19 No fix listed CWE-399
TI-2014-04448 CVE-2014-5450 · GHSA-vh7c-pr9c-3fgx

Zarafa Collaboration Platform 4.1 uses world-readable permissions for…

Priority LOW 25

Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00407 Published 2018-03-19 No fix listed CWE-200
Open these records in search →