Zimbra Collaboration Suite (ZCS) Undo Shared Calendar Accessibility Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. An undo shared calendar accessibility vulnerability exists in Zimbra Collaboration Suite ZCS versions prior to 8.8.15 Patch 7. The vulnerability stems from the fact that after an attacke...

Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A security vulnerability exists in Zimbra Collaboration Suite ZCS versions prior to 8.8.15 Patch 7. The vulnerability stems from an improperly designed or implemented code development...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-8633

An issue was discovered in Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible...

CVE-2020-8633

An issue was discovered in Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible...

Server side request forgery (ssrf)

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

Code injection

An issue was discovered in Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible...

CVE-2020-8633

CVE-2020-8633 affects Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. The issue arises when grantors revoke a shared calendar in Outlook: the calendar remains mounted and accessible instead of being properly revoked. Public sources in connected documents confirm this behavior and link to ...

CVE-2020-8633

An issue was discovered in Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 is vulnerable to SSRF when the WebEx zimlet is installed and the zimlet JSP is enabled. The issue is documented in CVE-2020-7796 and is corroborated by multiple sources (NVD, Nuclei template, Red Hat advisory, CNVD, osv.dev, etc.). Impact des...

How we productized our staging environment and survived to tell the tale

Managing the Imperva SaaS infrastructure is like herding cats. There are so many moving parts, new developments, testing, fixing bugs, patching, reducing our SLAs, fighting the bad guys and, most importantly, pushing our latest and greatest to production every week. And it all runs like clockwork...

Cisco TelePresence Collaboration Endpoint Path Traversal Vulnerability

Cisco RoomOS Software and Cisco?TelePresence Collaboration Endpoint CE are both products of the U.S. Cisco Cisco.Cisco RoomOS Software is a set of automated management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisco...

The vulnerability of the Cisco Hosted Collaboration Mediation Fulfillment software’s web interface allows a perpetrator to perform arbitrary actions in the context of the current user.

The vulnerability of the Cisco Hosted Collaboration Mediation Fulfillment software web interface is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform arbitrary actions in the context of the current user, usin...

PT-2020-19795

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions prior to 8.8.15 Patch 7 Description The software is susceptible to a Server-Side Request Forgery SSRF attack when the WebEx zimlet is installed and the zimlet JSP is enabled. A recent surge in the...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-04923)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05086)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application'...