Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

synacor zimbra collaboration suite 8.7 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2018-6882
Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) prior to 8.7 Patch 1 and 8.8.x prior to 8.8.7 might allow remote malicious users to inject arbitrary web script or HTML via a Content-Location header i...
Synacor Zimbra Collaboration Suite 8.8.4Synacor Zimbra Collaboration Suite 8.8.6Synacor Zimbra Collaboration Suite 8.7Synacor Zimbra Collaboration Suite 8.8.0Synacor Zimbra Collaboration Suite 8.8.1Synacor Zimbra Collaboration Suite 8.8.2Synacor Zimbra Collaboration Suite 8.8.3Synacor Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite 8.8.5
4
CVSSv2
CVE-2019-6981
Zimbra Collaboration Suite 8.7.x up to and including 8.8.11 allows Blind SSRF in the Feed component.
Synacor Zimbra Collaboration Suite 8.8.11Synacor Zimbra Collaboration Suite 8.8.10Synacor Zimbra Collaboration Suite 8.8.9Synacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration Suite
7.5
CVSSv2
CVE-2019-6980
Synacor Zimbra Collaboration Suite 8.7.x up to and including 8.8.11 allows insecure object deserialization in the IMAP component.
Synacor Zimbra Collaboration Suite 8.8.10Synacor Zimbra Collaboration Suite 8.8.9Synacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration Suite 8.8.11Synacor Zimbra Collaboration Suite
4.3
CVSSv2
CVE-2018-18631
mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 prior to 8.7.11 Patch 7, and 8.8 prior to 8.8.10 Patch 2 has Persistent XSS.
Synacor Zimbra Collaboration Suite 8.8.9Synacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite 8.8.10Synacor Zimbra Collaboration Suite 8.6.0
7.5
CVSSv2
CVE-2018-20160
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
Synacor Zimbra Collaboration Suite 8.8.10Synacor Zimbra Collaboration Suite 8.8.9Synacor Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration Suite 8.8.11
5
CVSSv2
CVE-2018-15131
An issue exists in Synacor Zimbra Collaboration Suite 8.6.x prior to 8.6.0 Patch 11, 8.7.x prior to 8.7.11 Patch 6, 8.8.x prior to 8.8.8 Patch 9, and 8.8.9 prior to 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authenticati...
Synacor Zimbra Collaboration Suite 8.6.0Synacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration Suite 8.8.8Synacor Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite 8.8.9
4.3
CVSSv2
CVE-2018-10939
Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 prior to 8.8.8.Patch4 and 8.7 prior to 8.7.11.Patch4 has Persistent XSS via a contact group.
Synacor Zimbra Collaboration Suite 8.8.8Zimbra Zimbra Collaboration Suite 8.8.8Synacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration Suite
6.8
CVSSv2
CVE-2015-7610
Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) prior to 8.6.0 Patch 10, 8.7.x prior to 8.7.11 Patch 2, and 8.8.x prior to 8.8.8 Patch 1 allows remote malicious users to hijack the authentication of unspecified victims by ...
Zimbra Zimbra Collaboration Suite 8.6.0Synacor Zimbra Collaboration Suite 8.6.0Synacor Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite 8.7.11
5
CVSSv2
CVE-2018-10950
mailboxd in Zimbra Collaboration Suite 8.8 prior to 8.8.8; 8.7 prior to 8.7.11.Patch3; and 8.6 prior to 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.
Synacor Zimbra Collaboration Suite 8.6.0Synacor Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite 8.7.11
7.5
CVSSv2
CVE-2019-9670
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x prior to 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.
Synacor Zimbra Collaboration Suite 8.7.11Synacor Zimbra Collaboration Suite
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook