Rezultati pretraživanja za 'Proizvođač: zimbra'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-37580 | 6.1 | Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. | 2025-10-31 14:43:05 | 2023-07-31 16:15:10 |
| CVE-2024-9665 | 6.5 | Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Zimbra. User interaction is required to exploit this vulnerabili | 2025-01-03 21:58:29 | 2024-11-22 21:15:23 |
| CVE-2017-20188 | 2.1 | A vulnerability has been found in Zimbra zm-ajax up to 8.8.1 and classified as problematic. Affected by this vulnerability is the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js. The manipulation of the argum | 2024-01-09 14:28:14 | 2024-01-02 15:15:08 |
| CVE-2020-10194 | 4.0 | cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the ga | 2021-07-21 11:39:00 | 2020-03-20 21:15:00 |
| CVE-2015-7610 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspe | 2020-06-04 12:32:00 | 2018-05-30 21:29:00 |
| CVE-2020-11737 | 4.3 | A cross-site scripting (XSS) vulnerability in Web Client in Zimbra 9.0 allows a remote attacker to craft links in an E-Mail message or calendar invite to execute arbitrary JavaScript. The attack requires an A element containing an href attribute with | 2020-05-07 20:37:00 | 2020-05-05 15:15:00 |
| CVE-2013-1938 | 4.3 | Zimbra 2013 has XSS in aspell.php | 2020-02-25 18:48:00 | 2020-02-12 16:15:00 |
| CVE-2012-1213 | 4.3 | Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter. | 2017-11-18 02:29:00 | 2012-02-24 13:55:00 |
| CVE-2013-7217 | 10.0 | Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified vectors, a different vulnerability than CVE-2013-7091. | 2017-08-29 01:34:00 | 2013-12-26 18:55:00 |
| CVE-2008-1226 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6, and possibly other versions before 4.5.10 allow remote attackers to inject arbitrary web script or HTML via an e-mail attachment, possibly involving | 2017-08-08 01:29:00 | 2008-03-10 17:44:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: