Synacor

Records106All Threatist records

Exploited (KEV)19In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

Synacor records in CISA KEV

Products in the NVD configurations · select one to filter the records

5 records in Zimbra Collaboration Server · all components

TI-2014-07036 CVE-2014-8563 · GHSA-972r-246w-r833

MEDIUM 47

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02527 Published 2020-01-27 No fix listed CWE-78

TI-2015-01982 CVE-2015-2230 · GHSA-q2x5-qxvr-ch2p

LOW 29

Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00806 Published 2019-05-30 No fix listed CWE-79

TI-2014-04468 CVE-2014-5500 · GHSA-f4v6-mm6g-c3xw

LOW 29

Synacor Zimbra Collaboration before 8.0.8 has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00833 Published 2020-01-27 No fix listed CWE-79

TI-2019-08452 CVE-2019-11318 · GHSA-5w44-6qm8-5cf9

LOW 27

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0111 Published 2020-01-27 No fix listed CWE-79

TI-2015-01996 CVE-2015-2249 · GHSA-r5wv-5gpc-84mq

LOW 26

Zimbra Collaboration before 8.6.0 patch5 has XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00693 Published 2020-01-27 No fix listed CWE-79