2019-05-30 00:29:01 2019-05-30 19:44:53

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Synacor Zimbra collaboration suite 8.7.11 - (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P1 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P10 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P2 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P3 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P4 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P5 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P6 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P7 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P8 (not an official CPE) Synacor Zimbra collaboration suite 8.7.11 P9 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 - (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P1 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P2 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P3 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P4 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P6 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P7 (not an official CPE) Synacor Zimbra collaboration suite 8.8.9 P8 (not an official CPE) Synacor Zimbra collaboration suite 8.8.10 - (not an official CPE) Synacor Zimbra collaboration suite 8.8.10 P2 (not an official CPE) Synacor Zimbra collaboration suite 8.8.10 P3 (not an official CPE) Synacor Zimbra collaboration suite 8.8.10 P4 (not an official CPE) Synacor Zimbra collaboration suite 8.8.10 P6 (not an official CPE) Synacor Zimbra collaboration suite 8.8.11 - (not an official CPE) Synacor Zimbra collaboration suite 8.8.11 P2 (not an official CPE)