Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
synacor zimbra collaboration suite vulnerabilities and exploits
(subscribe to this query)
356
VMScore
CVE-2018-10951
mailboxd in Zimbra Collaboration Suite 8.8 prior to 8.8.8; 8.7 prior to 8.7.11.Patch3; and 8.6 prior to 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API.
Zimbra Zimbra Collaboration Suite 8.6
Zimbra Zimbra Collaboration Suite 8.7.11
Synacor Zimbra Collaboration Suite
356
VMScore
CVE-2016-3401
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
Synacor Zimbra Collaboration Suite
445
VMScore
CVE-2016-3402
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect confidentiality via unknown vectors, aka bug 99167.
Synacor Zimbra Collaboration Suite
605
VMScore
CVE-2016-3403
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration prior to 8.6.0 Patch 8 allow remote malicious users to hijack the authentication of administrators for requests that (1) add, (2) modify, or (3) remove accounts by leveraging f...
Synacor Zimbra Collaboration Suite
445
VMScore
CVE-2016-3404
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect integrity via unknown vectors, aka bug 103959.
Synacor Zimbra Collaboration Suite
445
VMScore
CVE-2016-3405
Multiple unspecified vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to affect integrity via unknown vectors, aka bugs 103961 and 104828.
Synacor Zimbra Collaboration Suite
605
VMScore
CVE-2016-3406
Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader extension or (2) extension REST handlers, aka bugs 1042...
Synacor Zimbra Collaboration Suite
383
VMScore
CVE-2016-3407
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175.
Synacor Zimbra Collaboration Suite
383
VMScore
CVE-2016-3408
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813.
Synacor Zimbra Collaboration Suite
383
VMScore
CVE-2016-3409
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bug 102637.
Synacor Zimbra Collaboration Suite
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scripting
CVE-2024-5158
XML external entity
CVE-2024-4262
CVE-2024-2036
CVE-2024-4985
CVE-2024-21791
remote attackers
CVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »