Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2018-14425

Disclosure Date: May 30, 2019 (last updated November 27, 2024)
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1.
0
0
Attacker Value
Unknown

CVE-2018-15131

Disclosure Date: May 30, 2019 (last updated November 27, 2024)
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
0
0
Attacker Value
Unknown

CVE-2019-6981

Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.
0
0
Attacker Value
Unknown

CVE-2018-18631

Disclosure Date: May 29, 2019 (last updated November 27, 2024)
mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS.
0
0
Attacker Value
Unknown

CVE-2019-6980

Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.
0
0
Attacker Value
Unknown

CVE-2018-20160

Disclosure Date: May 29, 2019 (last updated November 27, 2024)
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
0
0
Attacker Value
Unknown

CVE-2018-14013

Disclosure Date: May 29, 2019 (last updated November 27, 2024)
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.
0
0