Approved changes feed: RSS · Atom

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch5:*:*:*:*:*:*

part: a version: 8.6.0 update: patch5

VendorSynacor (c68ec80d-d30e-5207-9d78-e97400e9956b)
ProductZimbra Collaboration Suite (f968d556-0a02-5a8f-96e3-822a38d8f1db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/zimbra/zm-build purl2cpe 2026-06-01 10:11:13.912690
pkg:zimbra/zimbra-collaboration purl2cpe 2026-06-01 10:11:13.912691

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9621 vulnerable 2026-06-08 05:14:25.837007 Details available
Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
Published: 2019-04-30T17:40:53.000Z
Updated: 2025-10-21T23:45:38.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10951 vulnerable 2026-06-08 05:10:37.537136 Details available
mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API.
Published: 2018-05-10T01:00:00.000Z
Updated: 2024-09-17T01:37:08.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10950 vulnerable 2026-06-08 05:10:37.523337 Details available
mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.
Published: 2018-05-10T01:00:00.000Z
Updated: 2024-09-17T01:11:38.347Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.