Vulnerabilities (CVE)

Filtered by vendor Zarafa Subscribe
Filtered by product Webaccess
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-7219 1 Zarafa 1 Webaccess 2019-04-26 4.3 MEDIUM 6.1 MEDIUM
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.