Approved changes feed: RSS · Atom

cpe:2.3:a:zarafa:webaccess:7.2.0-48204:*:*:*:*:*:*:*

part: a version: 7.2.0-48204 update: *

VendorZarafa (a7663be9-f691-58b6-9bac-209b638d33ca)
ProductWebaccess (45a6ebf3-8f00-5b25-a53a-9305ec75d6b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bosim/zarafa-webaccess purl2cpe 2026-06-01 10:12:31.492722
pkg:rpm/opensuse/zarafa-webaccess purl2cpe 2026-06-01 10:12:31.492724

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7219 vulnerable 2026-06-08 05:14:14.080880 Details available
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.
Published: 2019-04-11T18:43:58.000Z
Updated: 2024-08-04T20:46:44.767Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.