CVE-2014-9465: senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7....

Security readout for executives and security teams

This flaw lets a remote attacker fill temporary disk space on vulnerable Zarafa webmail systems by submitting many file uploads. The expected business impact is service disruption, not data theft or code execution based on the supplied sources. Exposure is limited to organizations still running affected Zarafa WebApp or Zarafa Collaboration Platform WebAccess versions, especially internet-facing webmail portals. The supplied CVE data does not identify broader products beyond Zarafa WebApp and ZCP WebAccess. Treat this as a legacy exposure cleanup item with service-availability risk. Prioritize if Zarafa webmail is internet-facing, business-critical, or unsupported. It is less urgent than known-exploited remote code execution, based on the supplied evidence. Mitigation focus: Inventory Zarafa WebApp and ZCP WebAccess deployments and versions.; Upgrade to fixed Zarafa versions or distribution packages referenced by vendor advisories.; Review vendor guidance before applying any workaround not named in the sources..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.