Vulnerabilities fixed in Zimbra

🗓️ 10 Oct 2024 12:50:25Reported by NCSCType

Synacor fixes Zimbra RCE via SMTP enabling webshells; PoC CVE-2024-45519; NCSC tool.

Reporter	Title	Published	Views	Family All 146
GithubExploit	Exploit for OS Command Injection in Zimbra Collaboration	5 Oct 202400:15	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zimbra Collaboration	22 Nov 202401:56	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zimbra Collaboration	28 Sep 202408:29	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses tinymce-6.8.3.tgz which is vulnerable to CVE-2024-38357, CVE-2024-38356	19 Sep 202415:46	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of TinyMCE 6.8.2 IBM My webMethods Server is vulnerable to cross-site scripting.	25 Apr 202511:29	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in tinymce-6.8.1.min.js used by IBM Maximo Asset Management application (CVE-2024-38357, CVE-2024-38356)	6 Sep 202408:31	–	ibm
ATTACKERKB	CVE-2024-45519	2 Oct 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the TinyMCE formatted text editor arises from the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks.	23 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zimbra Collaboration Suite’s email management system, which stems from insufficient validation of incoming requests, allows attackers to carry out SRF attacks.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Postjournal Service in the corporate email management system Zimbra Collaboration Suite allows a perpetrator to execute arbitrary commands.	20 Sep 202400:00	–	bdu_fstec