PT-2020-17260

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite Network Edition versions prior to 9.0.0 P10 Zimbra Collaboration Suite Network Edition versions prior to 8.8.15 P17 Description The issue is related to an XXE vulnerability in the saml consumer store extension, makin...

CVE-2020-35123: Improper Restriction of XML External Entity Reference

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

Zimbra Collaboration Suite Code Issue Vulnerability

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A code issue vulnerability exists in Zimbra Collaboration Suite that stems from the vulnerability of the Consumer Store extension to XXE attacks...