5425 matches found
CVE-2019-8947
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
CVE-2015-2249
Zimbra Collaboration before 8.6.0 patch5 has XSS...
CVE-2015-2249
CVE-2015-2249 affects Zimbra Collaboration Suite prior to 8.6.0 patch5 with a cross-site scripting (XSS) vulnerability. Connected sources confirm an XSS flaw in the web application. No explicit root cause, exploitation status, or remediation details are provided in the connected documents.
CVE-2014-5500
Synacor Zimbra Collaboration before 8.0.8 has XSS...
CVE-2014-5500
Synacor Zimbra Collaboration before 8.0.8 has XSS...
CVE-2014-5500
CVE-2014-5500 affects Synacor Zimbra Collaboration Suite (ZCS) prior to version 8.0.8. The connected documents confirm a cross-site scripting (XSS) vulnerability in the Web application, stemming from insufficient validation of client‑side data. Public references describe the affected product and ...
CVE-2019-11318
Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...
CVE-2019-11318
Zimbra Collaboration Server (before 8.8.12 Patch 1) is affected by a persistent cross-site scripting (XSS) vulnerability in the web application. The provided documents specify the issue as a persistent XSS but do not detail the vulnerable component, root-cause, exploit method, or affected version...
CVE-2019-12427
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2019-12427
CVE-2019-12427 affects Zimbra Collaboration before 8.8.15 Patch 1, with a non-persistent XSS vulnerability in the Admin Console. The connected Red Hat/OSV/CVE entries corroborate the same description. No remediation/versioned mitigation details are provided in the documents.
CVE-2019-15313
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
CVE-2019-15313
CVE-2019-15313 affects Zimbra Collaboration Suite prior to 8.8.15 Patch 1, with a non-persistent Cross-Site Scripting (XSS) vulnerability in the web application. The available connected documents consistently describe the issue as an XSS flaw without details on specific vulnerable endpoints, affe...
CVE-2019-12427: Improper Neutralization of Input During Web Page Generation
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
PT-2020-7819
Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration versions prior to 8.6.0 patch5 Description: The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details abou...
PT-2020-9188
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.12 Patch 1 Description The issue is related to persistent XSS. Recommendations For versions prior to 8.8.12 Patch 1, update to version 8.8.12 Patch 1 or later to resolve the issue...
PT-2020-7718
Name of the Vulnerable Software and Affected Versions Synacor Zimbra Collaboration versions prior to 8.0.8 Description The issue is related to a cross-site scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentiall...
PT-2020-11338
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 8.7.x through 8.8.11P2 Description The issue is related to a persistent XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
PT-2020-11337
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 8.7.x through 8.8.11P2 Description The issue is related to a persistent XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...