Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| https://github.com/zimbra/zm-build | affected | < 6c3c77b328a0d7d3bafecb79d202960217922ef0 | vendor fix → 6c3c77b328a0d7d3bafecb79d202960217922ef0 | osv | |
| https://github.com/zimbra/zm-build | affected | < 5000d7ff7c8650dbfff91678647fabc2bbf0e64b | vendor fix → 5000d7ff7c8650dbfff91678647fabc2bbf0e64b | osv | |
| https://github.com/zimbra/zm-build | affected | >= 6c3c77b328a0d7d3bafecb79d202960217922ef0, <= 31312ceebfeba104e1e2a16c554e734125b911d1 | none available | osv | |
| https://github.com/zimbra/zm-mailbox | affected | < 65929222951131db2cbb2378accbdd5f2fac0980 | vendor fix → 65929222951131db2cbb2378accbdd5f2fac0980 | osv | |
| https://github.com/zimbra/zm-mailbox | affected | < d5dcfa4470bbb057d961a28fc9c35717eeaa7225 | vendor fix → d5dcfa4470bbb057d961a28fc9c35717eeaa7225 | osv | |
| https://github.com/zimbra/zm-mailbox | affected | >= 65929222951131db2cbb2378accbdd5f2fac0980, <= 690ec66d0cc226ca25ecde7c39159032e654986b | none available | osv | |
| https://github.com/zimbra/zm-zcs | affected | < e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | vendor fix → e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | osv | |
| https://github.com/zimbra/zm-zcs | affected | < d36a4c8999c6377b7ae36c22f47bbea75974e8cc | vendor fix → d36a4c8999c6377b7ae36c22f47bbea75974e8cc | osv | |
| https://github.com/zimbra/zm-zcs | affected | >= e177bad87d5312e7b2cd1915ae8c0cd2528cacdb, <= 9aefd1afbab7e83046c6dceac5351fc52a026648 | none available | osv | |
| https://github.com/zimbra/zm-zcs-lib | affected | < a1cbf80618e47b3cf0894cbbcaec1da9bece583c | vendor fix → a1cbf80618e47b3cf0894cbbcaec1da9bece583c | osv | |
| https://github.com/zimbra/zm-zcs-lib | affected | < 6e5ea502a8b78a16e1c2d1d51331b62c31eb4c7e | vendor fix → 6e5ea502a8b78a16e1c2d1d51331b62c31eb4c7e | osv | |
| https://github.com/zimbra/zm-zcs-lib | affected | >= a1cbf80618e47b3cf0894cbbcaec1da9bece583c, <= f44a0aee0f5b049a48b4400c0a0332a2817a3f19 | none available | osv | |
| https://github.com/zimbra/zm-build | fixed | 6c3c77b328a0d7d3bafecb79d202960217922ef0 | vendor fix → 6c3c77b328a0d7d3bafecb79d202960217922ef0 | osv | |
| https://github.com/zimbra/zm-build | fixed | 5000d7ff7c8650dbfff91678647fabc2bbf0e64b | vendor fix → 5000d7ff7c8650dbfff91678647fabc2bbf0e64b | osv | |
| https://github.com/zimbra/zm-mailbox | fixed | 65929222951131db2cbb2378accbdd5f2fac0980 | vendor fix → 65929222951131db2cbb2378accbdd5f2fac0980 | osv | |
| https://github.com/zimbra/zm-mailbox | fixed | d5dcfa4470bbb057d961a28fc9c35717eeaa7225 | vendor fix → d5dcfa4470bbb057d961a28fc9c35717eeaa7225 | osv | |
| https://github.com/zimbra/zm-zcs | fixed | e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | vendor fix → e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | osv | |
| https://github.com/zimbra/zm-zcs | fixed | d36a4c8999c6377b7ae36c22f47bbea75974e8cc | vendor fix → d36a4c8999c6377b7ae36c22f47bbea75974e8cc | osv | |
| https://github.com/zimbra/zm-zcs-lib | fixed | a1cbf80618e47b3cf0894cbbcaec1da9bece583c | vendor fix → a1cbf80618e47b3cf0894cbbcaec1da9bece583c | osv | |
| https://github.com/zimbra/zm-zcs-lib | fixed | 6e5ea502a8b78a16e1c2d1d51331b62c31eb4c7e | vendor fix → 6e5ea502a8b78a16e1c2d1d51331b62c31eb4c7e | osv | |
| n/a/n/a n/a · n/a | affected | no version stated vendor label: all versions | none available | cve_cna |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.