Known vulnerabilities in Zimbra Collaboration 8.8.15 Patch 26 - page 2

Vendor: Synacor Inc.

Software: Zimbra Collaboration

Version: 8.8.15 Patch 26

Software CPE: cpe:2.3:a:synacor:zimbra_collaboration:*:*:*:*:*:*:*:*

Website: https://www.zimbra.com/

Total vulnerabilities: 57

Public exploits: 10

Known exploited (KEV): 10

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (57)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU79877 - Improper Authentication CVE-2023-41106	CWE-287	Medium	No	No	8.8.15 Patch 42, 9.0.0 Patch 35, 10.0.3	23.08.2023	SB2023082306
#VU78672 - Exposure of sensitive information to an unauthorized actor CVE-2023-38750	CWE-200	Medium	No	No	8.8.15 Patch 41, 9.0.0 Patch 34, 10.0.2	26.07.2023	SB2023072608
#VU78242 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-37580	CWE-79	High	No	Exploited	8.8.15 Patch 41	13.07.2023	SB2023071343
#VU76649 - Improper Authentication CVE-2023-29381	CWE-287	Medium	No	No	8.8.15 Patch 40, 9.0.0 Patch 33, 10.0.1	30.05.2023	SB2023053035
#VU76648 - Improper Authentication CVE-2023-29382	CWE-287	High	No	No	8.8.15 Patch 40, 9.0.0 Patch 33, 10.0.1	30.05.2023	SB2023053035
#VU76646 - Security Features CVE-2023-34193	CWE-254	Medium	No	No	8.8.15 Patch 40, 9.0.0 Patch 33, 10.0.1	30.05.2023	SB2023053035
#VU76645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-34192	CWE-79	Medium	No	Exploited	8.8.15 Patch 40	30.05.2023	SB2023053035
#VU73960 - Resource exhaustion CVE-2023-0464	CWE-400	Medium	No	No	8.8.15 Patch 41, 9.0.0 Patch 34, 10.0.2	22.03.2023	SB2023032241 SB2023033057 SB2023033058 and 100 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-25690	CWE-113	Medium	Public exploit available	No	8.8.15 Patch 40, 9.0.0 Patch 33, 10.0.1	07.03.2023	SB2023030731 SB2023030862 SB2023030942 and 54 more
#VU72474 - Improper Authorization	CWE-285	Low	No	No	8.8.15 Patch 37, 9.0.0 Patch 30	21.02.2023	SB2023022183
#VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304	CWE-208	Medium	No	No	8.8.15 Patch 37, 9.0.0 Patch 30	07.02.2023	SB2023020742 SB2023020748 SB2023020767 and 222 more
#VU71992 - Type confusion CVE-2023-0286	CWE-843	High	No	No	8.8.15 Patch 37, 9.0.0 Patch 30	07.02.2023	SB2023020742 SB2023020747 SB2023020748 and 223 more
#VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364	CWE-918	Medium	No	No	8.8.15 Patch 40, 9.0.0 Patch 33, 10.0.1	20.12.2022	SB2022122009 SB2023011329 SB2023011707 and 67 more
#VU69502 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Medium	No	No	8.8.15 Patch 35, 9.0.0 Patch 28	22.11.2022	SB2022112233
#VU69501 - Unrestricted Upload of File with Dangerous Type	CWE-434	Medium	No	No	8.8.15 Patch 35, 9.0.0 Patch 28	22.11.2022	SB2022112233
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377	CWE-444	Medium	Public exploit available	No	8.8.15 Patch 35, 9.0.0 Patch 28	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 39 more
#VU63084 - Improper input validation CVE-2022-22970	CWE-20	Medium	No	No	8.8.15 Patch 40, 9.0.0 Patch 33, 10.0.1	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 23 more
#VU62802 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-20771	CWE-835	Medium	No	No	8.8.15 Patch 35, 9.0.0 Patch 28	04.05.2022	SB2022050437 SB2022051732 SB2022051836 and 14 more
#VU62800 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-20770	CWE-835	Medium	No	No	8.8.15 Patch 35, 9.0.0 Patch 28	04.05.2022	SB2022050437 SB2022051732 SB2022051836 and 14 more
#VU61671 - Memory corruption CVE-2018-25032	CWE-119	Medium	No	No	8.8.15 Patch 37, 9.0.0 Patch 30	28.03.2022	SB2022032844 SB2022032845 SB2022033018 and 192 more

Showing elements 21 - 40 out of 57

Known vulnerabilities in Zimbra Collaboration 8.8.15 Patch 26 - page 2

Vulnerabilities by Severity

Vulnerabilities (57)

Please verify you're human