Vulnerabilities (CVE)

Filtered by vendor Znuny Subscribe
Filtered by product Znuny
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-48938 1 Znuny 1 Znuny 2024-10-17 N/A 7.5 HIGH
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.
CVE-2024-48937 1 Znuny 1 Znuny 2024-10-17 N/A 6.1 MEDIUM
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.