Approved changes feed: RSS · Atom

cpe:2.3:a:zimbra:collaboration:9.0.0:*:*:*:*:*:*:*

part: a version: 9.0.0 update: *

VendorZimbra (2c2042e1-5f4a-5590-841f-bd7953d2bb5f)
ProductCollaboration (dc8aeab5-e039-5ffe-a16a-100a59003217)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29382 vulnerable 2026-06-08 06:02:40.085749 Details available
An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T19:16:32.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29381 vulnerable 2026-06-08 06:02:40.055949 Details available
An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T17:26:11.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45912 vulnerable 2026-06-08 05:50:37.520890 Details available
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote code execution.
Published: 2022-12-05T00:00:00.000Z
Updated: 2025-04-24T13:42:35.561Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.