Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zarafa webapp - vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2014-5447
Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the PHP session files. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0103.
Zarafa Zarafa 7.1.10Zarafa Webapp 1.6
2.1
CVSSv2
CVE-2014-5449
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.
Zarafa Webaccess 4.1Zarafa Webapp -
2.1
CVSSv2
CVE-2014-0103
WebAccess in Zarafa prior to 7.1.10 and WebApp prior to 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.
Fedoraproject Fedora 19Zarafa Zarafa 7.0.10Zarafa Zarafa 7.0.12Zarafa Zarafa 7.0.7Zarafa Zarafa 7.0.9Zarafa WebappZarafa ZarafaZarafa Zarafa 7.0Zarafa Zarafa 7.0.1Zarafa Zarafa 7.1.1Zarafa Zarafa 7.0.2Zarafa Zarafa 7.0.3Zarafa Zarafa 7.0.4Zarafa Zarafa 7.0.5Zarafa Zarafa 7.1.2Zarafa Zarafa 7.1.3Zarafa Zarafa 7.1.4Fedoraproject Fedora 20Zarafa Zarafa 7.0.11Zarafa Zarafa 7.0.13Zarafa Zarafa 7.0.6Zarafa Zarafa 7.0.8
5
CVSSv2
CVE-2014-9465
senddocument.php in Zarafa WebApp prior to 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x prior to 7.1.12 beta 1 and 7.2.x prior to 7.2.0 beta 1 allows remote malicious users to cause a denial of service (/tmp disk consumption) by uploading a large number of ...
Fedoraproject Fedora 21Fedoraproject Fedora 20Zarafa Zarafa Collaboration Platform 7.0.3Zarafa Zarafa Collaboration Platform 7.0.5Zarafa Zarafa Collaboration Platform 7.0.12Zarafa Zarafa Collaboration Platform 7.1.0Zarafa Zarafa Collaboration Platform 7.1.7Zarafa Zarafa Collaboration Platform 7.1.9Zarafa WebappZarafa Zarafa Collaboration Platform 7.0.0Zarafa Zarafa Collaboration Platform 7.0.1Zarafa Zarafa Collaboration Platform 7.0.2Zarafa Zarafa Collaboration Platform 7.1.2Zarafa Zarafa Collaboration Platform 7.1.3Zarafa Zarafa Collaboration Platform 7.1.4Zarafa Zarafa Collaboration Platform 7.1.5Zarafa Zarafa Collaboration Platform 7.0.7Zarafa Zarafa Collaboration Platform 7.0.8Zarafa Zarafa Collaboration Platform 7.0.9Zarafa Zarafa Collaboration Platform 7.0.10Zarafa Zarafa Collaboration Platform 7.0.11Zarafa Zarafa Collaboration Platform 7.1.10
4.3
CVSSv2
CVE-2019-7219
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and previous versions. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product i...
Zarafa Webaccess 7.2.0-48204
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook