zimbra zimbra collaboration server vulnerabilities and exploits

(subscribe to this query)

NA

Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and previous versions, and 8.0.x up to and including 8.0.5, has "critical" impact and unspecified vectors, a different vulnerability than CVE-2013-7091.

Zimbra Collaboration Server 8.0.3 Zimbra Collaboration Server 8.0.2 Zimbra Collaboration Server 7.2.0 Zimbra Collaboration Server 7.1.4 Zimbra Collaboration Server 8.0.1 Zimbra Collaboration Server 8.0.0 Zimbra Collaboration Server 7.1.3 Zimbra Collaboration Server 7.1.2 Zimbra Collaboration Server Zimbra Collaboration Server 7.2.4 Zimbra Collaboration Server 7.2.3 Zimbra Collaboration Server 7.1.1 Zimbra Collaboration Server 7.1.0 Zimbra Collaboration Server 7.0.1 Zimbra Collaboration Server 8.0.5 Zimbra Collaboration Server 8.0.4 Zimbra Collaboration Server 7.2.2 Zimbra Collaboration Server 7.2.1 Zimbra Collaboration Server 7.0.0

7.5

CVSSv3

Zimbra Collaboration Suite prior to 8.6 patch 13, 8.7.x prior to 8.7.11 patch 10, and 8.8.x prior to 8.8.10 patch 7 or 8.8.x prior to 8.8.11 patch 3 allows SSRF via the ProxyServlet component.

Zimbra Collaboration Server 8.6.0 Zimbra Collaboration Server Zimbra Collaboration Server 8.7.11 Zimbra Collaboration Server 8.8.10 Zimbra Collaboration Server 8.8.11

2 EDB exploits2 Github repositories

6.1

CVSSv3

In Zimbra Collaboration prior to 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.

Zimbra Collaboration Server Zimbra Collaboration Server 8.8.15

6.1

CVSSv3

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.

Zimbra Collaboration Server Zimbra Collaboration Server 8.8.11

6.1

CVSSv3

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.

Zimbra Collaboration Server Zimbra Collaboration Server 8.8.11

6.1

CVSSv3

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.

Zimbra Collaboration Server Zimbra Collaboration Server 8.8.11

NA

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote malicious users to read arbitrary files via a .. (dot dot) in the skin parameter. NOTE: this can be leveraged to execute arbit...

Synacor Zimbra Collaboration Suite 6.0.0 Synacor Zimbra Collaboration Suite 6.0.2 Synacor Zimbra Collaboration Suite 6.0.3 Synacor Zimbra Collaboration Suite 6.0.1 Synacor Zimbra Collaboration Suite 6.0.10 Synacor Zimbra Collaboration Suite 6.0.12 Synacor Zimbra Collaboration Suite 6.0.4 Synacor Zimbra Collaboration Suite 6.0.5 Synacor Zimbra Collaboration Suite 6.0.13 Synacor Zimbra Collaboration Suite 6.0.14 Synacor Zimbra Collaboration Suite 6.0.6 Synacor Zimbra Collaboration Suite 6.0.7 Synacor Zimbra Collaboration Suite 6.0.15 Synacor Zimbra Collaboration Suite 6.0.16 Synacor Zimbra Collaboration Suite 6.0.8 Synacor Zimbra Collaboration Suite 6.0.9

2 EDB exploits1 Nmap script1 Github repository1 Article

8.8

CVSSv3

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) prior to 8.5 allow remote malicious users to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to servi...

Zimbra Zimbra Collaboration Server

1 EDB exploit

6.1

CVSSv3

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Zimbra Zimbra Collaboration Server

5.4

CVSSv3

Zimbra Collaboration prior to 8.6.0 patch5 has XSS.

Synacor Zimbra Collaboration Server Synacor Zimbra Collaboration Server 8.6.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook