medium6.1
CVE-2018-14013
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.
Impact
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synacor | Zimbra Collaboration Suite | before 8.7.11 from 8.8.0 before 8.8.9 Versions 8.7.11, 8.8.9, 8.8.10, 8.8.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Feb/3
- http://www.openwall.com/lists/oss-security/2019/01/30/1
- http://www.securityfocus.com/bid/106787
- https://bugzilla.zimbra.com/show_bug.cgi?id=109017
- https://bugzilla.zimbra.com/show_bug.cgi?id=109018
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- http://packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Feb/3
- http://www.openwall.com/lists/oss-security/2019/01/30/1
- http://www.securityfocus.com/bid/106787
- https://bugzilla.zimbra.com/show_bug.cgi?id=109017
- https://bugzilla.zimbra.com/show_bug.cgi?id=109018
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories