Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
synacor zimbra collaboration suite vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2016-3410
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839.
Synacor Zimbra Collaboration Suite
4.3
CVSSv2
CVE-2016-3412
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413, 104414, 104777, and 104791.
Synacor Zimbra Collaboration Suite
4
CVSSv2
CVE-2019-6981
Zimbra Collaboration Suite 8.7.x up to and including 8.8.11 allows Blind SSRF in the Feed component.
Synacor Zimbra Collaboration Suite 8.8.11
Synacor Zimbra Collaboration Suite 8.8.10
Synacor Zimbra Collaboration Suite 8.8.9
Synacor Zimbra Collaboration Suite 8.7.11
Synacor Zimbra Collaboration Suite
4
CVSSv2
CVE-2018-10951
mailboxd in Zimbra Collaboration Suite 8.8 prior to 8.8.8; 8.7 prior to 8.7.11.Patch3; and 8.6 prior to 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API.
Zimbra Zimbra Collaboration Suite 8.6
Zimbra Zimbra Collaboration Suite 8.7.11
Synacor Zimbra Collaboration Suite
4
CVSSv2
CVE-2016-3414
Unspecified vulnerability in Zimbra Collaboration prior to 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, aka bug 102029.
Synacor Zimbra Collaboration Suite
4
CVSSv2
CVE-2016-3401
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
Synacor Zimbra Collaboration Suite
3.5
CVSSv2
CVE-2018-10948
Synacor Zimbra Admin UI in Zimbra Collaboration Suite prior to 8.8.0 beta 2 has Persistent XSS via mail addrs.
Synacor Zimbra Collaboration Suite
Synacor Zimbra Collaboration Suite 8.8.0
3.5
CVSSv2
CVE-2017-8783
Synacor Zimbra Collaboration Suite (ZCS) prior to 8.7.10 has Persistent XSS.
Synacor Zimbra Collaboration Suite
NA
CVE-2022-3569
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.
Synacor Zimbra Collaboration Suite
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-52710
arbitrary
CVE-2024-5272
CVE-2024-2961
brute force
remote
CVE-2024-32944
CVE-2024-36241
CVE-2024-5274
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5