Synacor Zimbra Collaboration Suite 8.6.0
Approved changes feed: RSS · Atom
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:-:*:*:*:*:*:*
part: a version: 8.6.0 update: -
| Vendor | Synacor (c68ec80d-d30e-5207-9d78-e97400e9956b) |
|---|---|
| Product | Zimbra Collaboration Suite (f968d556-0a02-5a8f-96e3-822a38d8f1db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/zimbra/zm-build |
purl2cpe | 2026-06-01 10:11:13.888282 |
pkg:zimbra/zimbra-collaboration |
purl2cpe | 2026-06-01 10:11:13.888283 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9621 |
vulnerable | 2026-06-08 05:14:25.832376 |
Details available
Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
Published: 2019-04-30T17:40:53.000Z
Updated: 2025-10-21T23:45:38.514Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15131 |
vulnerable | 2026-06-08 05:10:53.822184 |
Details available
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
Published: 2019-05-30T15:22:03.000Z
Updated: 2024-08-05T09:46:25.307Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10951 |
vulnerable | 2026-06-08 05:10:37.536940 |
Details available
mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API.
Published: 2018-05-10T01:00:00.000Z
Updated: 2024-09-17T01:37:08.761Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10950 |
vulnerable | 2026-06-08 05:10:37.520709 |
Details available
mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.
Published: 2018-05-10T01:00:00.000Z
Updated: 2024-09-17T01:11:38.347Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7609 |
vulnerable | 2026-06-08 05:07:01.527909 |
Details available
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.
Published: 2019-05-30T19:21:11.000Z
Updated: 2024-08-06T07:51:28.638Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.