2059 matches found
CVE-2016-3406
Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...
CVE-2016-3407
Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175...
CVE-2016-3410
Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839...
CVE-2016-3411
Cross-site scripting XSS vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 103609...
CVE-2016-3414
Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, aka bug 102029...
CVE-2016-3999
Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104552 and 104703...
CVE-2016-4019
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477...
CVE-2016-3413
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996...
CVE-2016-3407
CVE-2016-3407 refers to multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0. The description notes remote attackers can inject arbitrary web script or HTML via unspecified vectors (bugs 104222, 104910, 105071, 105175). The NVD entry lists a CVSS v2 base score ...
CVE-2016-3414
Technical details about CVE-2016-3414 are not publicly provided in the connected documents. The sources only repeat the generic Zimbra vulnerability description; monitor for updates.
CVE-2016-3402
CVE-2016-3402 concerns Zimbra Collaboration Suite prior to 8.7.0. OpenVAS notes multiple vulnerabilities in Zimbra
CVE-2016-3404
Technical details for CVE-2016-3404 are not publicly available in the provided documents. The records confirm an unspecified vulnerability in Zimbra Collaboration before 8.7.0 but do not include affected components, exploit vectors, impacts, or fixes. Monitor for updates.
CVE-2016-3405
CVE-2016-3405 affects Zimbra Collaboration Suite prior to 8.7.0. Multiple unspecified vulnerabilities could allow remote attackers to affect integrity via unknown vectors (bugs 103961 and 104828). Connected documents indicate version before 8.7.0 and an implied remediation path via 8.7.0 or later...
CVE-2016-3406
CVE-2016-3406 affects Zimbra Collaboration Server prior to 8.7.0, where CSRF vulnerabilities exist in the Client uploader extension and in extension REST handlers (bugs 104294/104456). The impact is that an attacker could hijack a user’s authenticated session. Connected sources confirm the affect...
CVE-2016-3411
CVE-2016-3411 is an XSS vulnerability in Zimbra Collaboration pre-8.7.0. Exploitation is via input sanitization gaps that allow remote attackers to inject arbitrary scripts/HTML (vectors unspecified). Public references note affected versions include 8.6.x (e.g., 8.6.0_GA_1153) and indicate the is...
CVE-2016-3412
CVE-2016-3412 refers to multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to version 8.7.0. The description indicates remote attackers could inject arbitrary web script or HTML through unspecified attack vectors (bugs 103997, 104413, 104414, 104777, 104791). The co...
CVE-2016-3413
CVE-2016-3413 affects Zimbra Collaboration Server prior to 8.7.0. The description indicates an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors (Bug 103996). From the associated metrics, CVSS v3 base score is 7.5 (HIGH) with NETWORK attack, low attack...
CVE-2016-3415
CVE-2016-3415 affects Zimbra Collaboration Suite prior to 8.7.0, with a deserialization vulnerability exploitable via unspecified vectors (bug 102276). The NVD entry notes a high-severity impact (CVSS‑3.0: 9.1, NETWORK attack, no user interaction required; C and I HIGH, A NONE) and a Medium CVSS‑...
CVE-2016-4019
Technical details about CVE-2016-4019 are not publicly available in the provided documents; no affected components, root cause, or fixes are specified. Monitor for updates from Zimbra advisories and related references.