Show filters
50 Total Results
Displaying 11-20 of 50
Sort by:
Attacker Value
Unknown
CVE-2018-10948
Disclosure Date: May 30, 2019 (last updated November 27, 2024)
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.
0
Attacker Value
Unknown
CVE-2018-15131
Disclosure Date: May 30, 2019 (last updated November 27, 2024)
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
0
Attacker Value
Unknown
CVE-2019-6981
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.
0
Attacker Value
Unknown
CVE-2018-18631
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS.
0
Attacker Value
Unknown
CVE-2019-6980
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.
0
Attacker Value
Unknown
CVE-2018-20160
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
0
Attacker Value
Unknown
CVE-2018-14013
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.
0
Attacker Value
Unknown
CVE-2018-17938
Disclosure Date: October 03, 2018 (last updated November 27, 2024)
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value.
0
Attacker Value
Unknown
CVE-2018-10939
Disclosure Date: May 30, 2018 (last updated November 26, 2024)
Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group.
0
Attacker Value
Unknown
CVE-2015-7610
Disclosure Date: May 30, 2018 (last updated November 26, 2024)
Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF token.
0
