CVE-2019-8946

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-15313

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

CVE-2019-8947

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...

CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CVE-2015-2249

Zimbra Collaboration before 8.6.0 patch5 has XSS...

CVE-2019-12427

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2019-12427

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CVE-2014-5500

Synacor Zimbra Collaboration before 8.0.8 has XSS...

CVE-2014-8563

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...

Cross site scripting

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

Cross site scripting

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

Cross site scripting

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

Cross site scripting

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

Cross site scripting

Zimbra Collaboration before 8.6.0 patch5 has XSS...

Cross site scripting

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...

Design/Logic Flaw

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2014-8563

CVE-2014-8563 affects Synacor Zimbra Collaboration Suite before version 8.0.9. The vulnerability is described as plaintext command injection during STARTTLS, stemming from input data not properly filtered when constructing OS-executable commands. Several connected sources reiterate that versions ...

CVE-2014-8563

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...

CVE-2019-8945

CVE-2019-8945 affects Zimbra Collaboration Suite (versions 8.7.x through 8.8.11P2) and is described as a persistent cross‑site scripting (XSS) vulnerability in the web/WEB application component. The connected documents corroborate this issue across multiple sources (NVD, Red Hat advisory, CNVD, o...