CVE-2021-28994

7.5 highEPSS 2.0%

High (7.5). EPSS 2.0% chance of exploitation in the next 30 days.

kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2021-03-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kopano:groupware_core
zarafa:zarafa

References

http://www.openwall.com/lists/oss-security/2021/04/01/1
http://www.openwall.com/lists/oss-security/2021/04/25/1
https://www.openwall.com/lists/oss-security/2021/03/19/6
http://www.openwall.com/lists/oss-security/2021/04/01/1
http://www.openwall.com/lists/oss-security/2021/04/25/1

Check your stack JSON