Skip to content
Zarafa vulnerabilities
Newest
-
kopano groupware core, zarafa +1 more
kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10...
CVE-2021-28994
7.5 High
-
zarafa webaccess
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and...
CVE-2019-7219
Public exploit
6.1 Medium
-
zarafa collaboration platform, fedoraproject fedora +1 more
zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain...
CVE-2015-6566
8.4 High
-
zarafa collaboration platform
provider/server/ECServer.cpp in Zarafa Collaboration Platform (ZCP) before 7.1.13 and 7.2.x...
CVE-2015-3436
6.6 Medium
-
zarafa webapp, collaboration platform, fedoraproject fedora +2 more
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration...
CVE-2014-9465
Fix available
5.0 Medium
-
zarafa collaboration platform
Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which...
CVE-2014-5450
5.5 Medium
-
zarafa webaccess, webapp +1 more
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp...
CVE-2014-5449
2.1 Low
-
zarafa
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows...
CVE-2014-5448
2.1 Low
-
zarafa webapp, zarafa +1 more
Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which...
CVE-2014-5447
2.1 Low
-
zarafa webapp, zarafa, fedoraproject fedora +2 more
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which...
CVE-2014-0103
2.1 Low
-
zarafa
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and...
CVE-2014-0079
5.0 Medium
-
zarafa
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8...
CVE-2014-0037
5.0 Medium