Zimbra Collaboration Server < 8.7.11 Patch 11, 8.8 < 8.8.9 Patch 10, 8.8.10 < Patch 8, 8.8.11 < Patch 4

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilies: - Zimbra Collaboration Suite allows SSRF via the ProxyServlet component CVE-2019-9621 - Zimbra Collaboration Suite allows Blind SSRF in the Feed component. CVE-2019-6981 Note that...

CVE-2019-6981

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component...

CVE-2019-6981

CVE-2019-6981 affects Zimbra Collaboration Suite 8.7.x through 8.8.11 and is described as a Blind SSRF vulnerability in the Feed component. Public sources in the provided documents confirm the issue exists in the specified product range, with no details on exploit vectors beyond SSRF and no patch...