PatchTheCVEkopano vulnerabilities
Recent CVEs affecting kopano products. 2 tracked.
kopano has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-01. Highest priority: CVE-2022-26562 (score 65/100).
- CVE-2022-26562 CRITICAL 9.8 DOWNGRADE An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attac
- CVE-2021-28994 HIGH 7.5 UPGRADE UPGRADE kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10
FAQ
How do I fix kopano vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kopano being exploited right now?
None of the tracked kopano CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kopano CVE should I patch first?
CVE-2022-26562 currently ranks highest (65/100): An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attac.