Zimbra Collaboration Suite (ZCS) Directory Traversal Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A directory traversal vulnerability exists in Zimbra Collaboration Suite ZCS, which could be exploited by an attacker to compromise the confidentiality, availability, or integrity of the...

Cisco Prime Collaboration Provisioning Multiple Directory Traversal Vulnerabilities (May 2017)

cisco prime collaboration provisioning is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Unspecified Elevation of Privilege Vulnerability in Zimbra Collaboration Suite

Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. An unspecified elevation of privilege vulnerability exists in Zimbra Collaboration Suite. An attacker can exploit this vulnerability to gain...

Unspecified HTML Injection Vulnerability in Zimbra Collaboration Suite

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified HTML injection vulnerability exists in Zimbra Collaboration Suite. An attacker could exploit the...

CVE-2017-7288

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

CVE-2017-6821

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

CVE-2017-6821

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

Directory traversal

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

CVE-2017-7288

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-6821

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

CVE-2017-7288

CVE-2017-7288 affects Zimbra Collaboration Suite (ZCS) before 8.7.1, allowing remote XSS via unspecified vectors. Impact: injection of arbitrary web script/HTML in a user’s browser. Affected component: ZCS web interface; root cause: XSS vulnerability in versions prior to 8.7.1. Remediation: upgra...

CVE-2017-6813

CVE-2017-6813 affects Zimbra Collaboration Suite (ZCS) prior to version 8.7.6. The issue is an insufficient privilege check in a service, allowing certain operations to be carried out without required privileges, which constitutes elevation of privilege. Public references describe ZCS 8.7.6 as a ...

CVE-2017-6821

Summary (CVE-2017-6821) : Zimbra Collaboration Suite (ZCS) contains a directory traversal vulnerability in versions before 8.7.6. The CVE entry cites an unspecified impact via unknown vectors. Public-connected data confirms the issue in ZCS prior to 8.7.6 and aligns with multiple CVE references. ...

CVE-2017-6821: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

CVE-2017-6813: Undefined Security Weakness

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...