4464 matches found
CVE-2020-7796
Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...
CVE-2020-7796
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 is vulnerable to SSRF when the WebEx zimlet is installed and the zimlet JSP is enabled. The issue is documented in CVE-2020-7796 and is corroborated by multiple sources (NVD, Nuclei template, Red Hat advisory, CNVD, osv.dev, etc.). Impact des...
How we productized our staging environment and survived to tell the tale
Managing the Imperva SaaS infrastructure is like herding cats. There are so many moving parts, new developments, testing, fixing bugs, patching, reducing our SLAs, fighting the bad guys and, most importantly, pushing our latest and greatest to production every week. And it all runs like clockwork...
Cisco TelePresence Collaboration Endpoint Path Traversal Vulnerability
Cisco RoomOS Software and Cisco?TelePresence Collaboration Endpoint CE are both products of the U.S. Cisco Cisco.Cisco RoomOS Software is a set of automated management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisco...
The vulnerability of the Cisco Hosted Collaboration Mediation Fulfillment software’s web interface allows a perpetrator to perform arbitrary actions in the context of the current user.
The vulnerability of the Cisco Hosted Collaboration Mediation Fulfillment software web interface is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform arbitrary actions in the context of the current user, usin...
PT-2020-19795
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions prior to 8.8.15 Patch 7 Description The software is susceptible to a Server-Side Request Forgery SSRF attack when the WebEx zimlet is installed and the zimlet JSP is enabled. A recent surge in the...
Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-04923)
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...
Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05086)
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application'...
Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05085)
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...
Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05089)
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...
Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05087)
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...
Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05088)
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...
RSA Conference 2020—Empower your defenders with artificial intelligence and automation
The RSA Conference 2020 kicks off in less than three weeks, and the Microsoft Security team can’t wait. This is one of our most important annual events because it provides an invaluable opportunity for us to connect with customers, partners, and other security thought leaders. New ideas are...
New capabilities for eDiscovery now available
With the exponential growth of data, there is a pressing need for broader visibility into ever-increasing case activities that require eDiscovery to extend to chat-based communication and collaboration tools. New capabilities help you manage eDiscovery in Microsoft Teams including the ability to...
5 identity priorities for 2020
Today, Joy Chik, Corporate Vice President of Identity, shared five priorities central to security that organizations should prioritize in 2020 as they digitally transform. These priorities are based on many conversations with our customers, including: 1. Connect all applications and cloud resourc...
CVE-2019-8946
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...
CVE-2019-8945
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...
CVE-2019-8945
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...