CVE-2019-8945

CVE-2019-8945 affects Zimbra Collaboration Suite (versions 8.7.x through 8.8.11P2) and is described as a persistent cross‑site scripting (XSS) vulnerability in the web/WEB application component. The connected documents corroborate this issue across multiple sources (NVD, Red Hat advisory, CNVD, o...

CVE-2019-8945

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-8946

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-8946

CVE-2019-8946 affects Zimbra Collaboration 8.7.x–8.8.11P2 and is described as a persistent XSS vulnerability. The connected documents confirm the affected product and vulnerability class but do not provide technical root cause details, affected subcomponents, exploit steps, or remediation guidanc...

CVE-2019-8947

The CVE refers to Zimbra Collaboration (versions 8.7.x through 8.8.11P2) with a non-persistent Cross-Site Scripting (XSS) vulnerability in the WEB application caused by insufficient validation of client-side data. Several connected sources confirm a XSS issue affecting Zimbra Collaboration and de...

CVE-2019-8947

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...

CVE-2015-2249

Zimbra Collaboration before 8.6.0 patch5 has XSS...

CVE-2015-2249

CVE-2015-2249 affects Zimbra Collaboration Suite prior to 8.6.0 patch5 with a cross-site scripting (XSS) vulnerability. Connected sources confirm an XSS flaw in the web application. No explicit root cause, exploitation status, or remediation details are provided in the connected documents.

CVE-2014-5500

Synacor Zimbra Collaboration before 8.0.8 has XSS...

CVE-2014-5500

Synacor Zimbra Collaboration before 8.0.8 has XSS...

CVE-2014-5500

CVE-2014-5500 affects Synacor Zimbra Collaboration Suite (ZCS) prior to version 8.0.8. The connected documents confirm a cross-site scripting (XSS) vulnerability in the Web application, stemming from insufficient validation of client‑side data. Public references describe the affected product and ...

CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CVE-2019-11318

Zimbra Collaboration Server (before 8.8.12 Patch 1) is affected by a persistent cross-site scripting (XSS) vulnerability in the web application. The provided documents specify the issue as a persistent XSS but do not detail the vulnerable component, root-cause, exploit method, or affected version...

CVE-2019-12427

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2019-12427

CVE-2019-12427 affects Zimbra Collaboration before 8.8.15 Patch 1, with a non-persistent XSS vulnerability in the Admin Console. The connected Red Hat/OSV/CVE entries corroborate the same description. No remediation/versioned mitigation details are provided in the documents.

CVE-2019-15313

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

CVE-2019-15313

CVE-2019-15313 affects Zimbra Collaboration Suite prior to 8.8.15 Patch 1, with a non-persistent Cross-Site Scripting (XSS) vulnerability in the web application. The available connected documents consistently describe the issue as an XSS flaw without details on specific vulnerable endpoints, affe...

CVE-2019-12427: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

PT-2020-7819

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration versions prior to 8.6.0 patch5 Description: The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details abou...

PT-2020-9188

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.12 Patch 1 Description The issue is related to persistent XSS. Recommendations For versions prior to 8.8.12 Patch 1, update to version 8.8.12 Patch 1 or later to resolve the issue...