Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2018-20160

Published: 29/05/2019 Updated: 30/05/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Zimbra Collaboration Suite

Vulnerability Summary

Zimbra could allow a remote authenticated malicious user to obtain sensitive information, caused by an XML external entity (XXE) error when processing XML data by the chat component. By sending a specially-crafted XML request to mailbox. A remote attacker could exploit this vulnerability to obtain sensitive information.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

synacor zimbra collaboration suite

synacor zimbra collaboration suite 8.7.11

synacor zimbra collaboration suite 8.8.9

synacor zimbra collaboration suite 8.8.10

synacor zimbra collaboration suite 8.8.11

References

CWE-611https://bugzilla.zimbra.com/show_bug.cgi?id=109093https://wiki.zimbra.com/wiki/Security_Centerhttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisorieshttps://nvd.nist.govhttps://exchange.xforce.ibmcloud.com/vulnerabilities/161913
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2021-20661CVE-2020-4953CVE-2018-19518CVE-2021-27645CVE-2021-3156CVE-2021-26684deserializationwireless