5394 matches found
CVE-2015-2230
Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console...
CVE-2018-10948
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs...
CVE-2018-10948
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs...
CVE-2018-14425
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite ZCS Zimbra Web Client ZWC 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1...
Design/Logic Flaw
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs...
CVE-2018-10948
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs...
CVE-2018-10948
The vulnerability CVE-2018-10948 affects Synacor Zimbra Collaboration Suite’s Admin UI (Zimbra Admin UI) in versions before 8.8.0 beta 2, where a Persistent XSS exists via mail addrs. The connected Red Hat/NVD entries confirm the issue is a stored XSS in the Admin UI affected component, but the a...
CVE-2018-14425
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite ZCS Zimbra Web Client ZWC 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1...
CVE-2018-14425
CVE-2018-14425 concerns a Persistent XSS vulnerability in the Zimbra Web Client’s briefcase component within Zimbra Collaboration Suite (ZCS). Affected versions are ZCS/ZWC 8.8.8 prior to Patch 7 and 8.8.9 prior to Patch 1. The root cause is improper handling/validation of client-side data in the...
Authentication flaw
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests...
CVE-2018-15131
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests...
CVE-2018-15131
CVE-2018-15131 affects Synacor Zimbra Collaboration Suite: versions 8.6.x prior to 8.6.0 Patch 11, 8.7.x prior to 8.7.11 Patch 6, 8.8.x prior to 8.8.8 Patch 9, and 8.8.9 prior to 8.8.9 Patch 3. are vulnerable to account number enumeration due to inconsistent responses for certain authentication r...
CVE-2018-15131
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests...
PT-2019-8774
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions prior to 8.8.0 beta 2 Description The issue is related to a Persistent XSS vulnerability via mail addresses in the Synacor Zimbra Admin UI. Recommendations For versions prior to 8.8.0 beta 2, update to versi...
PT-2019-9091
Name of the Vulnerable Software and Affected Versions Synacor Zimbra Collaboration Suite versions 8.6.x through 8.6.0 Patch 10 Synacor Zimbra Collaboration Suite versions 8.7.x through 8.7.11 Patch 5 Synacor Zimbra Collaboration Suite versions 8.8.x through 8.8.8 Patch 8 Synacor Zimbra...
PT-2019-9024
Name of the Vulnerable Software and Affected Versions Synacor Zimbra Collaboration Suite ZCS Zimbra Web Client ZWC versions 8.8.8 through 8.8.8 before Patch 7 Synacor Zimbra Collaboration Suite ZCS Zimbra Web Client ZWC versions 8.8.9 through 8.8.9 before Patch 1 Description The issue is related ...
CVE-2018-10948: Improper Neutralization of Input During Web Page Generation
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs...
CVE-2018-14425: Improper Neutralization of Input During Web Page Generation
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite ZCS Zimbra Web Client ZWC 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1...
CVE-2015-2230: Improper Neutralization of Input During Web Page Generation
Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console...
PT-2019-7174
Name of the Vulnerable Software and Affected Versions Synacor Zimbra Collaboration Server versions prior to 8.7.0 Description The issue is related to Reflected XSS in the admin console. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later to resolve the issue...