CVE-2019-7219

MEDIUM NUCLEI

Zarafa Webapp <2.0.1.47791 - XSS

Title source: llm

Description

Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.

Exploits (1)

nomisec WORKING POC

by verifysecurity · poc

https://github.com/verifysecurity/CVE-2019-7219

View Code ZIP pw:eip

Nuclei Templates (1)

Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting

MEDIUMby pdteam

References (2)

[Third Party Advisory] https://github.com/verifysecurity/CVE-2019-7219

[Third Party Advisory] https://stash.kopano.io/repos?visibility=public

Scores

CVSS v3 6.1

EPSS 0.1492

EPSS Percentile 94.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

zarafa/webaccess 7.2.0-48204

Published Apr 11, 2019

Tracked Since Feb 18, 2026