CVE-2016-3412

CVE-2016-3412 refers to multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to version 8.7.0. The description indicates remote attackers could inject arbitrary web script or HTML through unspecified attack vectors (bugs 103997, 104413, 104414, 104777, 104791). The co...

CVE-2016-3412

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413, 104414, 104777, and 104791...

CVE-2016-3411

CVE-2016-3411 is an XSS vulnerability in Zimbra Collaboration pre-8.7.0. Exploitation is via input sanitization gaps that allow remote attackers to inject arbitrary scripts/HTML (vectors unspecified). Public references note affected versions include 8.6.x (e.g., 8.6.0_GA_1153) and indicate the is...

CVE-2016-3407

CVE-2016-3407 refers to multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0. The description notes remote attackers can inject arbitrary web script or HTML via unspecified vectors (bugs 104222, 104910, 105071, 105175). The NVD entry lists a CVSS v2 base score ...

CVE-2016-3407

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175...

CVE-2016-3404

Technical details for CVE-2016-3404 are not publicly available in the provided documents. The records confirm an unspecified vulnerability in Zimbra Collaboration before 8.7.0 but do not include affected components, exploit vectors, impacts, or fixes. Monitor for updates.

CVE-2016-3411

Cross-site scripting XSS vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 103609...

CVE-2016-3406

Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...

CVE-2016-3405

Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828...

CVE-2016-3409

CVE-2016-3409 (Zimbra Collaboration) is an XSS vulnerability affecting Zimbra Collaboration Server before version 8.7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (bug 102637). Public sources consistently describe this as a cross‑site scripti...

CVE-2016-3401

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810...

CVE-2016-3415

Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276...

CVE-2016-4019

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477...

CVE-2016-3999

Zimbra Collaboration (before 8.7.0) is affected by multiple cross-site scripting (XSS) vulnerabilities. The validated connected sources identify the root cause as failure to sanitize user-supplied input, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Aff...

CVE-2016-3413

CVE-2016-3413 affects Zimbra Collaboration Server prior to 8.7.0. The description indicates an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors (Bug 103996). From the associated metrics, CVSS v3 base score is 7.5 (HIGH) with NETWORK attack, low attack...

CVE-2016-3408: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813...

CVE-2016-3410: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839...

CVE-2016-3415: Deserialization of Untrusted Data

Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276...

CVE-2016-3406: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...

CVE-2016-3405: Undefined Security Weakness

Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828...