Approved changes feed: RSS · Atom

cpe:2.3:a:primx:zedmail:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorPrimx (4b6da3f8-a6f6-532d-97c8-8bbd7c7b83c1)
ProductZedmail (e6ae2e8e-f6b2-5048-b4ef-a25224845049)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50444 vulnerable 2026-06-08 06:16:16.160996 Details available
By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.
Published: 2023-12-13T00:00:00.000Z
Updated: 2024-11-26T15:22:48.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50440 vulnerable 2026-06-08 06:16:16.157081 Details available
ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; ZED! for Windows, Mac, Linux before 2023.5; ZEDFREE for Windows, Mac, Linux before 2023.5; or ZEDPRO for Windows, Mac, Linux before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger network access to an attacker-controlled computer when opened by the victim.
Published: 2023-12-13T00:00:00.000Z
Updated: 2025-06-03T13:43:44.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50439 vulnerable 2026-06-08 06:16:16.149092 Details available
ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows before 2023.5 disclose the original path in which the containers were created, which allows an unauthenticated attacker to obtain some information regarding the context of use (project name, etc.).
Published: 2023-12-13T00:00:00.000Z
Updated: 2024-08-02T22:16:46.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7312 vulnerable 2026-06-08 05:14:14.246891 Details available
Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.
Published: 2019-02-03T08:00:00.000Z
Updated: 2024-09-17T01:21:55.524Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.