Show filters
132 Total Results
Displaying 11-20 of 132
Sort by:
Attacker Value
Unknown
CVE-2020-7796
Disclosure Date: February 18, 2020 (last updated February 21, 2025)
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.
0
Attacker Value
Unknown
CVE-2015-7609
Disclosure Date: May 30, 2019 (last updated November 27, 2024)
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.
0
Attacker Value
Unknown
CVE-2018-14425
Disclosure Date: May 30, 2019 (last updated November 27, 2024)
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1.
0
Attacker Value
Unknown
CVE-2018-10948
Disclosure Date: May 30, 2019 (last updated November 27, 2024)
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.
0
Attacker Value
Unknown
CVE-2018-15131
Disclosure Date: May 30, 2019 (last updated November 27, 2024)
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
0
Attacker Value
Unknown
CVE-2019-6981
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.
0
Attacker Value
Unknown
CVE-2018-18631
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS.
0
Attacker Value
Unknown
CVE-2019-6980
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.
0
Attacker Value
Unknown
CVE-2018-20160
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
0
Attacker Value
Unknown
CVE-2018-14013
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.
0
