Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| https://github.com/zimbra/zm-build | affected | < 6c3c77b328a0d7d3bafecb79d202960217922ef0 | vendor fix → 6c3c77b328a0d7d3bafecb79d202960217922ef0 | osv | |
| https://github.com/zimbra/zm-build | affected | >= 6c3c77b328a0d7d3bafecb79d202960217922ef0, <= e4d1e657f1d2a5a5e8c56c11d7da34ef61574591 | none available | osv | |
| https://github.com/zimbra/zm-mailbox | affected | < 65929222951131db2cbb2378accbdd5f2fac0980 | vendor fix → 65929222951131db2cbb2378accbdd5f2fac0980 | osv | |
| https://github.com/zimbra/zm-mailbox | affected | >= 65929222951131db2cbb2378accbdd5f2fac0980, <= 7bcb07bd565ac40849e0dcabb70c6087396fac56 | none available | osv | |
| https://github.com/zimbra/zm-zcs | affected | < e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | vendor fix → e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | osv | |
| https://github.com/zimbra/zm-zcs | affected | >= e177bad87d5312e7b2cd1915ae8c0cd2528cacdb, <= 665cf237e9af42122681f08b9fa7a10d1a35aac3 | none available | osv | |
| https://github.com/zimbra/zm-zcs-lib | affected | < a1cbf80618e47b3cf0894cbbcaec1da9bece583c | vendor fix → a1cbf80618e47b3cf0894cbbcaec1da9bece583c | osv | |
| https://github.com/zimbra/zm-zcs-lib | affected | >= a1cbf80618e47b3cf0894cbbcaec1da9bece583c, <= 89d7224f1513c35311733d27e602b6c912d01ed2 | none available | osv | |
| https://github.com/zimbra/zm-build | fixed | 6c3c77b328a0d7d3bafecb79d202960217922ef0 | vendor fix → 6c3c77b328a0d7d3bafecb79d202960217922ef0 | osv | |
| https://github.com/zimbra/zm-mailbox | fixed | 65929222951131db2cbb2378accbdd5f2fac0980 | vendor fix → 65929222951131db2cbb2378accbdd5f2fac0980 | osv | |
| https://github.com/zimbra/zm-zcs | fixed | e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | vendor fix → e177bad87d5312e7b2cd1915ae8c0cd2528cacdb | osv | |
| https://github.com/zimbra/zm-zcs-lib | fixed | a1cbf80618e47b3cf0894cbbcaec1da9bece583c | vendor fix → a1cbf80618e47b3cf0894cbbcaec1da9bece583c | osv | |
| n/a/n/a n/a · n/a | affected | no version stated vendor label: all versions | none available | cve_cna |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.