Approved changes feed: RSS · Atom

cpe:2.3:a:zarafa:webapp:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorZarafa (a7663be9-f691-58b6-9bac-209b638d33ca)
ProductWebapp (b2fb410b-15ca-5898-ae22-3a7e49704900)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jelly/zarafa-webapp purl2cpe 2026-06-01 10:12:31.469960
pkg:rpm/opensuse/zarafa-webapp purl2cpe 2026-06-01 10:12:31.469963

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5449 vulnerable 2026-06-08 05:05:47.951446 Details available
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.
Published: 2014-10-20T15:00:00.000Z
Updated: 2024-08-06T11:48:48.455Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.