CVE-2019-7219

Опубликовано: 11 апр. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Средний

Описание

Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.

Ссылки

https://github.com/verifysecurity/CVE-2019-7219
Third Party Advisory
https://stash.kopano.io/repos?visibility=public
Third Party Advisory
https://github.com/verifysecurity/CVE-2019-7219
Third Party Advisory
https://stash.kopano.io/repos?visibility=public
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zarafa:webaccess:7.2.0-48204:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.43975

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2019-7219

CVSS3: 6.1

debian

почти 7 лет назад

Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa ...

GHSA-vf2v-q584-6v5p

CVSS3: 6.1

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.43975

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79