Browse CVEs

CRITICAL 9.8 CVE-2017-6821 Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vector… Zimbra Collaboration Suite after 8.7.5 Fix from $2,3002017-05-23 MEDIUM 6.1 CVE-2017-7288 Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inject arbitrary web script or H… Zimbra Collaboration Suite after 8.7.0 Fix from $1,6002017-05-23 HIGH 8.8 CVE-2016-3403 Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers t… Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-05-17 CRITICAL 9.8 CVE-2016-9924 Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks. Zimbra Collaboration Suite after 8.7.3 Fix from $2,3002017-03-29 CRITICAL 9.1 CVE-2016-3415 Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276. Zimbra Collaboration Suite after 8.6.0 Fix from $2,3002017-01-18 HIGH 8.8 CVE-2016-3406 Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication o… Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-3402 Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167. Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-3404 Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959. Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-3405 Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 10… Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-3413 Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996. Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-4019 Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477. Zimbra Collaboration Suite after 8.6.0 Fix from $1,9502017-01-18 MEDIUM 6.5 CVE-2016-3401 Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 998… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.5 CVE-2016-3414 Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, … Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3407 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3408 Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3409 Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3410 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3411 Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3412 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 6.1 CVE-2016-3999 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTM… Zimbra Collaboration Suite after 8.6.0 Fix from $1,6002017-01-18 MEDIUM 5.0 CVE-2013-7091EPSS 86% Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows re… Zimbra Collaboration Suite No fix yet Fix from $1,6002013-12-13 MEDIUM 6.8 CVE-2013-5119 Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_… Zimbra Collaboration Suite after 6.0.16 Fix from $1,6002013-09-23