Zarafa Webaccess
2 CVEs affecting Zarafa Webaccess. Latest disclosed: 2019-04-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7219 | Medium | 6.1 | 2019-04-11 | Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed… |
CVE-2014-5449 | | 2014-10-20 | Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information… |