Zimbra Collaboration CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2015-7609

Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed

Vendors

Synacor

Products

Zimbra Collaboration Suite

CVE-2015-2249

Zimbra Collaboration before 8.6.0 patch5 has XSS.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Synacor

Products

Zimbra Collaboration Server

CVE-2015-2230

Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Synacor

Products

Zimbra Collaboration Server

CVE-2014-8563

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed

Vendors

Synacor

Products

Zimbra Collaboration Server

CVE-2014-5500

Synacor Zimbra Collaboration before 8.0.8 has XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Synacor

Products

Zimbra Collaboration Server

« first previous Page 6 of 6.