Approved changes feed: RSS · Atom

cpe:2.3:a:zarafa:webapp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZarafa (a7663be9-f691-58b6-9bac-209b638d33ca)
ProductWebapp (b2fb410b-15ca-5898-ae22-3a7e49704900)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jelly/zarafa-webapp purl2cpe 2026-06-01 10:12:31.469962
pkg:rpm/opensuse/zarafa-webapp purl2cpe 2026-06-01 10:12:31.469965

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0103 vulnerable 2026-06-08 05:05:11.472249 Details available
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.
Published: 2014-07-29T14:00:00.000Z
Updated: 2024-08-06T09:05:39.021Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.