Zarafa / Webaccess

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2019-7219	Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed…	MEDIUM	6.1	Apr 11, 2019
CVE-2014-5449	Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information…	LOW	2.1	Oct 20, 2014

Rows per page

Showing 1 to 2 of 2 CVEs