Synacor Zimbra Collaboration Suite (ZCS) 8.8.9 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p1:*:*:*:*:*:*
part: a version: 8.8.9 update: p1
| Vendor | Synacor (c68ec80d-d30e-5207-9d78-e97400e9956b) |
|---|---|
| Product | Zimbra Collaboration Suite (f968d556-0a02-5a8f-96e3-822a38d8f1db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/zimbra/zm-build |
purl2cpe | 2026-06-01 10:11:13.953434 |
pkg:zimbra/zimbra-collaboration |
purl2cpe | 2026-06-01 10:11:13.953435 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-6981 |
vulnerable | 2026-06-08 05:14:13.616064 |
Details available
Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.
Published: 2019-05-29T21:14:38.000Z
Updated: 2024-08-04T20:38:32.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6980 |
vulnerable | 2026-06-08 05:14:13.604563 |
Details available
Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.
Published: 2019-05-29T21:10:00.000Z
Updated: 2024-08-04T20:38:32.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20160 |
vulnerable | 2026-06-08 05:11:26.731098 |
Details available
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
Published: 2019-05-29T21:12:00.000Z
Updated: 2024-08-05T11:51:19.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18631 |
vulnerable | 2026-06-08 05:11:14.387864 |
Details available
mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS.
Published: 2019-05-29T21:28:56.000Z
Updated: 2024-08-05T11:15:59.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15131 |
vulnerable | 2026-06-08 05:10:53.832948 |
Details available
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
Published: 2019-05-30T15:22:03.000Z
Updated: 2024-08-05T09:46:25.307Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14013 |
vulnerable | 2026-06-08 05:10:52.589910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.