Vulnerabilities (CVE)

Filtered by vendor Zarafa Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28994 2 Kopano, Zarafa 2 Groupware Core, Zarafa 2022-07-12 5.0 MEDIUM 7.5 HIGH
kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.
CVE-2015-6566 2 Fedoraproject, Zarafa 2 Fedora, Zarafa Collaboration Platform 2016-01-13 7.2 HIGH 8.4 HIGH
zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-*.