synacor zimbra collaboration suite 8.8.9 vulnerabilities and exploits

(subscribe to this query)

ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.

Synacor Zimbra Collaboration Suite 8.8.10 Synacor Zimbra Collaboration Suite 8.8.9 Synacor Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite 8.7.11 Synacor Zimbra Collaboration Suite 8.8.11

Synacor Zimbra Collaboration Suite 8.7.x up to and including 8.8.11 allows insecure object deserialization in the IMAP component.

Synacor Zimbra Collaboration Suite 8.8.10 Synacor Zimbra Collaboration Suite 8.8.9 Synacor Zimbra Collaboration Suite 8.7.11 Synacor Zimbra Collaboration Suite 8.8.11 Synacor Zimbra Collaboration Suite

Zimbra Collaboration Suite 8.7.x up to and including 8.8.11 allows Blind SSRF in the Feed component.

Synacor Zimbra Collaboration Suite 8.8.11 Synacor Zimbra Collaboration Suite 8.8.10 Synacor Zimbra Collaboration Suite 8.8.9 Synacor Zimbra Collaboration Suite 8.7.11 Synacor Zimbra Collaboration Suite

There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 prior to 8.8.8 Patch 7 and 8.8.9 prior to 8.8.9 Patch 1.

Synacor Zimbra Collaboration Suite 8.8.8 Synacor Zimbra Collaboration Suite 8.8.9 Synacor Zimbra Collaboration Suite

mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 prior to 8.7.11 Patch 7, and 8.8 prior to 8.8.10 Patch 2 has Persistent XSS.

Synacor Zimbra Collaboration Suite 8.8.9 Synacor Zimbra Collaboration Suite 8.7.11 Synacor Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite 8.8.10 Synacor Zimbra Collaboration Suite 8.6.0

Synacor Zimbra Collaboration Suite Collaboration prior to 8.8.11 has XSS in the AJAX and html web clients.

Synacor Zimbra Collaboration Suite 8.8.10 Synacor Zimbra Collaboration Suite 8.8.9 Synacor Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite 8.7.11 Synacor Zimbra Collaboration Suite 8.8.11

An issue exists in Synacor Zimbra Collaboration Suite 8.6.x prior to 8.6.0 Patch 11, 8.7.x prior to 8.7.11 Patch 6, 8.8.x prior to 8.8.8 Patch 9, and 8.8.9 prior to 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authenticati...

Synacor Zimbra Collaboration Suite 8.6.0 Synacor Zimbra Collaboration Suite 8.7.11 Synacor Zimbra Collaboration Suite 8.8.8 Synacor Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite 8.8.9

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook