Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Zimbra_collaboration_suite
(Synacor)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 49 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2019-05-30 | CVE-2015-7609 | Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra. | Zimbra_collaboration_suite | 6.1 | ||
| 2019-05-29 | CVE-2019-6981 | Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component. | Zimbra_collaboration_suite | 6.5 | ||
| 2019-05-29 | CVE-2019-6980 | Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component. | Zimbra_collaboration_suite | 9.8 | ||
| 2019-05-29 | CVE-2018-20160 | ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd. | Zimbra_collaboration_suite | 9.8 | ||
| 2019-05-29 | CVE-2018-18631 | mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS. | Zimbra_collaboration_suite | 6.1 | ||
| 2019-05-30 | CVE-2018-15131 | An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests. | Zimbra_collaboration_suite | 5.3 | ||
| 2019-05-29 | CVE-2018-14013 | Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients. | Zimbra_collaboration_suite | 6.1 | ||
| 2018-03-27 | CVE-2018-6882 | Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment. | Zimbra_collaboration_suite | 6.1 | ||
| 2018-02-04 | CVE-2017-8783 | Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS. | Zimbra_collaboration_suite | 5.4 | ||
| 2018-02-04 | CVE-2017-17703 | Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS. | Zimbra_collaboration_suite | 6.1 |