4416 matches found
CVE-2014-5500
Synacor Zimbra Collaboration before 8.0.8 has XSS...
CVE-2014-8563
Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...
Cross site scripting
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
Cross site scripting
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...
Cross site scripting
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...
Cross site scripting
Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...
Cross site scripting
Zimbra Collaboration before 8.6.0 patch5 has XSS...
Cross site scripting
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
Design/Logic Flaw
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2014-8563
CVE-2014-8563 affects Synacor Zimbra Collaboration Suite before version 8.0.9. The vulnerability is described as plaintext command injection during STARTTLS, stemming from input data not properly filtered when constructing OS-executable commands. Several connected sources reiterate that versions ...
CVE-2014-8563
Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...
CVE-2019-8945
CVE-2019-8945 affects Zimbra Collaboration Suite (versions 8.7.x through 8.8.11P2) and is described as a persistent cross‑site scripting (XSS) vulnerability in the web/WEB application component. The connected documents corroborate this issue across multiple sources (NVD, Red Hat advisory, CNVD, o...
CVE-2019-8945
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...
CVE-2019-8946
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...
CVE-2019-8946
CVE-2019-8946 affects Zimbra Collaboration 8.7.x–8.8.11P2 and is described as a persistent XSS vulnerability. The connected documents confirm the affected product and vulnerability class but do not provide technical root cause details, affected subcomponents, exploit steps, or remediation guidanc...
CVE-2019-8947
The CVE refers to Zimbra Collaboration (versions 8.7.x through 8.8.11P2) with a non-persistent Cross-Site Scripting (XSS) vulnerability in the WEB application caused by insufficient validation of client-side data. Several connected sources confirm a XSS issue affecting Zimbra Collaboration and de...
CVE-2019-8947
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
CVE-2015-2249
Zimbra Collaboration before 8.6.0 patch5 has XSS...
CVE-2015-2249
CVE-2015-2249 affects Zimbra Collaboration Suite prior to 8.6.0 patch5 with a cross-site scripting (XSS) vulnerability. Connected sources confirm an XSS flaw in the web application. No explicit root cause, exploitation status, or remediation details are provided in the connected documents.