Show filters
50 Total Results
Displaying 31-40 of 50
Sort by:
Attacker Value
Unknown
CVE-2016-3403
Disclosure Date: May 17, 2017 (last updated November 26, 2024)
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers to hijack the authentication of administrators for requests that (1) add, (2) modify, or (3) remove accounts by leveraging failure to use of a CSRF token and perform referer header checks, aka bugs 100885 and 100899.
0
Attacker Value
Unknown
CVE-2016-9924
Disclosure Date: March 29, 2017 (last updated November 26, 2024)
Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.
0
Attacker Value
Unknown
CVE-2016-3401
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
0
Attacker Value
Unknown
CVE-2016-3405
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828.
0
Attacker Value
Unknown
CVE-2016-3999
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104552 and 104703.
0
Attacker Value
Unknown
CVE-2016-3402
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167.
0
Attacker Value
Unknown
CVE-2016-3409
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 102637.
0
Attacker Value
Unknown
CVE-2016-4019
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477.
0
Attacker Value
Unknown
CVE-2016-3408
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813.
0
Attacker Value
Unknown
CVE-2016-3413
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996.
0
