Page 6 of 28 results (0.004 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vectors. Una vulnerabilidad de salto de directorio en Zimbra Collaboration Suite (también conocido como ZCS) en versiones anteriores a la 8.7.6 permite a los atacantes provocar un impacto no especificado mediante vectores desconocidos. • http://www.securityfocus.com/bid/98090 https://wiki.zimbra.com/wiki/Security_Center https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested operations. Un servicio prestado por Zimbra Collaboration Suite (ZCS) en versiones anteriores a la 8.7.6 no solicita los privilegios necesarios antes de realizar determinadas operaciones. • http://www.securityfocus.com/bid/98087 https://wiki.zimbra.com/wiki/Security_Center https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks. Zimbra Collaboration Suite (ZCS) en versiones anteriores a 8.7.4 permite a atacantes remotos conducir ataques XML External Entity (XXE). • http://www.securityfocus.com/bid/97121 https://wiki.zimbra.com/wiki/Security_Center • CWE-611: Improper Restriction of XML External Entity Reference •