Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zimbra collaboration vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2022-27924
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated malicious user to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
Zimbra Collaboration 9.0.0
Zimbra Collaboration 8.8.15
1 Github repository
1 Article
7.5
CVSSv3
CVE-2019-9621
Zimbra Collaboration Suite prior to 8.6 patch 13, 8.7.x prior to 8.7.11 patch 10, and 8.8.x prior to 8.8.10 patch 7 or 8.8.x prior to 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
Zimbra Collaboration Server 8.6.0
Zimbra Collaboration Server
Zimbra Collaboration Server 8.7.11
Zimbra Collaboration Server 8.8.10
Zimbra Collaboration Server 8.8.11
2 EDB exploits
2 Github repositories
7.5
CVSSv3
CVE-2016-3402
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect confidentiality via unknown vectors, aka bug 99167.
Synacor Zimbra Collaboration Suite
7.5
CVSSv3
CVE-2016-3405
Multiple unspecified vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to affect integrity via unknown vectors, aka bugs 103961 and 104828.
Synacor Zimbra Collaboration Suite
7.5
CVSSv3
CVE-2016-3413
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect integrity via unknown vectors, aka bug 103996.
Synacor Zimbra Collaboration Suite
7.5
CVSSv3
CVE-2016-4019
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect integrity via unknown vectors, aka bug 104477.
Synacor Zimbra Collaboration Suite
7.5
CVSSv3
CVE-2016-3404
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect integrity via unknown vectors, aka bug 103959.
Synacor Zimbra Collaboration Suite
7.2
CVSSv3
CVE-2022-45912
An issue exists in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote cod...
Zimbra Collaboration 9.0.0
Zimbra Collaboration 8.8.15
7.2
CVSSv3
CVE-2022-27925
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.
Zimbra Collaboration 9.0.0
Zimbra Collaboration 8.8.15
1 Metasploit module
13 Github repositories
1 Article
6.5
CVSSv3
CVE-2020-35123
In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8...
Zimbra Collaboration
Zimbra Collaboration 8.8.15
Zimbra Collaboration 9.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644
unprivileged
CVE-2024-3494
CVE-2024-22460
CVE-2024-26026
CVE-2024-23473
firewall
CVE-2024-28889
XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »