Approved changes feed: RSS · Atom

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:p3:*:*:*:*:*:*

part: a version: 8.6.0 update: p3

VendorSynacor (c68ec80d-d30e-5207-9d78-e97400e9956b)
ProductZimbra Collaboration Suite (f968d556-0a02-5a8f-96e3-822a38d8f1db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zimbra/zm-build purl2cpe 2026-06-01 10:11:13.905388
pkg:zimbra/zimbra-collaboration purl2cpe 2026-06-01 10:11:13.905390

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15131 vulnerable 2026-06-08 05:10:53.825472 Details available
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
Published: 2019-05-30T15:22:03.000Z
Updated: 2024-08-05T09:46:25.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7609 vulnerable 2026-06-08 05:07:01.530354 Details available
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.
Published: 2019-05-30T19:21:11.000Z
Updated: 2024-08-06T07:51:28.638Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.