CVE-2019-8945

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-8946

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-8946

CVE-2019-8946 affects Zimbra Collaboration 8.7.x–8.8.11P2 and is described as a persistent XSS vulnerability. The connected documents confirm the affected product and vulnerability class but do not provide technical root cause details, affected subcomponents, exploit steps, or remediation guidanc...

CVE-2019-8947

The CVE refers to Zimbra Collaboration (versions 8.7.x through 8.8.11P2) with a non-persistent Cross-Site Scripting (XSS) vulnerability in the WEB application caused by insufficient validation of client-side data. Several connected sources confirm a XSS issue affecting Zimbra Collaboration and de...

CVE-2019-8947

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...

CVE-2015-2249

Zimbra Collaboration before 8.6.0 patch5 has XSS...

CVE-2015-2249

CVE-2015-2249 affects Zimbra Collaboration Suite prior to 8.6.0 patch5 with a cross-site scripting (XSS) vulnerability. Connected sources confirm an XSS flaw in the web application. No explicit root cause, exploitation status, or remediation details are provided in the connected documents.

CVE-2014-5500

Synacor Zimbra Collaboration before 8.0.8 has XSS...

CVE-2014-5500

CVE-2014-5500 affects Synacor Zimbra Collaboration Suite (ZCS) prior to version 8.0.8. The connected documents confirm a cross-site scripting (XSS) vulnerability in the Web application, stemming from insufficient validation of client‑side data. Public references describe the affected product and ...

CVE-2019-11318

Zimbra Collaboration Server (before 8.8.12 Patch 1) is affected by a persistent cross-site scripting (XSS) vulnerability in the web application. The provided documents specify the issue as a persistent XSS but do not detail the vulnerable component, root-cause, exploit method, or affected version...

CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CVE-2019-12427

CVE-2019-12427 affects Zimbra Collaboration before 8.8.15 Patch 1, with a non-persistent XSS vulnerability in the Admin Console. The connected Red Hat/OSV/CVE entries corroborate the same description. No remediation/versioned mitigation details are provided in the documents.

CVE-2019-12427

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2019-15313

CVE-2019-15313 affects Zimbra Collaboration Suite prior to 8.8.15 Patch 1, with a non-persistent Cross-Site Scripting (XSS) vulnerability in the web application. The available connected documents consistently describe the issue as an XSS flaw without details on specific vulnerable endpoints, affe...

CVE-2019-15313

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability (CNVD-2020-03756)

Cisco Hosted Collaboration Mediation Fulfillment HCM-F is part of the Cisco Hosted Collaboration Solution HCS and is a core management component. A cross-site request forgery vulnerability exists in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment versions prior to 12.5...

Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Path Traversal Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software, Cisco TelePresence Codec TC Software, and Cisco RoomOS Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment HCM-F could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections by the affected...

CVE-2019-19857

Affected product: Serpico 1.3.0 (SimplE RePort wrIting and CollaboratiOn tool). Vulnerability: Admin can change their password without providing the current password via interfaces outside the Change Password screen. This bypasses the Old Password check and is noted to be problematic in conjuncti...

INTERPOL Collaboration Reduces Cryptojacking by 78%

Cybercriminals are often seen as having the upper hand over the “white hat” community. After all, they’re anonymous, can launch attacks from virtually anywhere in the world, and usually have the element of surprise. But there’s one secret weapon the good guys have: Collaboration. That’s why Trend...