Approved changes feed: RSS · Atom

cpe:2.3:a:zarafa:zarafa:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZarafa (a7663be9-f691-58b6-9bac-209b638d33ca)
ProductZarafa (438d5fff-74d5-5137-a05e-f75859e6d932)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:rpm/fedora/zarafa purl2cpe 2026-06-01 10:12:31.475668
pkg:rpm/opensuse/zarafa purl2cpe 2026-06-01 10:12:31.475670

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28994 vulnerable 2026-06-08 05:31:25.326897 Details available
kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.
Published: 2021-03-31T22:11:56.000Z
Updated: 2024-08-03T21:55:12.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0103 vulnerable 2026-06-08 05:05:11.472297 Details available
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.
Published: 2014-07-29T14:00:00.000Z
Updated: 2024-08-06T09:05:39.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0079 vulnerable 2026-06-08 05:05:11.255791 Details available
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."
Published: 2014-04-28T14:00:00.000Z
Updated: 2024-08-06T09:05:38.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.