Vulnerability index

Browse CVEs

82 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Zimbra Collaboration Suite CRITICAL 9.8
CVE-2017-6821

Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vector…

Fix: after 8.7.5
Fix from $2,300 2017-05-23
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2017-7288

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inject arbitrary web script or H…

Fix: after 8.7.0
Fix from $1,600 2017-05-23
Zimbra Collaboration Suite HIGH 8.8
CVE-2016-3403

Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers t…

Fix: after 8.6.0
Fix from $1,950 2017-05-17
Zimbra Collaboration Suite CRITICAL 9.8
CVE-2016-9924

Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.

Fix: after 8.7.3
Fix from $2,300 2017-03-29
Zimbra Collaboration Suite CRITICAL 9.1
CVE-2016-3415

Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276.

Fix: after 8.6.0
Fix from $2,300 2017-01-18
Zimbra Collaboration Suite HIGH 8.8
CVE-2016-3406

Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication o…

Fix: after 8.6.0
Fix from $1,950 2017-01-18
Zimbra Collaboration Suite HIGH 7.5
CVE-2016-3402

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167.

Fix: after 8.6.0
Fix from $1,950 2017-01-18
Zimbra Collaboration Suite HIGH 7.5
CVE-2016-3404

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959.

Fix: after 8.6.0
Fix from $1,950 2017-01-18
Zimbra Collaboration Suite HIGH 7.5
CVE-2016-3405

Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 10…

Fix: after 8.6.0
Fix from $1,950 2017-01-18
Zimbra Collaboration Suite HIGH 7.5
CVE-2016-3413

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996.

Fix: after 8.6.0
Fix from $1,950 2017-01-18
Zimbra Collaboration Suite HIGH 7.5
CVE-2016-4019

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477.

Fix: after 8.6.0
Fix from $1,950 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.5
CVE-2016-3401

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 998…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.5
CVE-2016-3414

Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, …

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3407

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3408

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3409

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3410

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3411

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3412

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 6.1
CVE-2016-3999

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM…

Fix: after 8.6.0
Fix from $1,600 2017-01-18
Zimbra Collaboration Suite MEDIUM 5.0
CVE-2013-7091EPSS 86%

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows re…

No fix yet
Fix from $1,600 2013-12-13
Zimbra Collaboration Suite MEDIUM 6.8
CVE-2013-5119

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_…

Fix: after 6.0.16
Fix from $1,600 2013-09-23