Vulnerabilities > Kopano > Groupware Core > 8.7.5

DATE CVE VULNERABILITY TITLE RISK
2021-03-31 CVE-2021-28994 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.
network
low complexity
kopano zarafa CWE-770
5.0
2019-12-19 CVE-2019-19907 Classic Buffer Overflow vulnerability in Kopano Groupware Core
HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.
network
low complexity
kopano CWE-120
critical
9.8