Known vulnerabilities in Zimbra Collaboration 8.8.15 Patch 32 - page 3

Vendor: Synacor Inc.

Software: Zimbra Collaboration

Version: 8.8.15 Patch 32

Software CPE: cpe:2.3:a:synacor:zimbra_collaboration:*:*:*:*:*:*:*:*

Website: https://www.zimbra.com/

Total vulnerabilities: 46

Public exploits: 6

Known exploited (KEV): 5

Highest CVSSv4 Score: 9.3

Vulnerabilities (46)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU66168 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-37044	CWE-79	Low	No	No	8.8.15 Patch 33	08.08.2022	SB2022080809
#VU66167 - Cross-Site Request Forgery (CSRF) CVE-2022-37043	CWE-352	Medium	No	No	8.8.15 Patch 33, 9.0.0 Patch 26	08.08.2022	SB2022080809
#VU66166 - Server-Side Request Forgery (SSRF) CVE-2022-37041	CWE-918	Low	No	No	8.8.15 Patch 33, 9.0.0 Patch 26	08.08.2022	SB2022080809
#VU66165 - Improper Authentication CVE-2022-37042	CWE-287	Medium	Public exploit available	Exploited	8.8.15 Patch 33, 9.0.0 Patch 26	08.08.2022	SB2022080809
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068	CWE-78	Medium	No	No	8.8.15 Patch 33, 9.0.0 Patch 26	21.06.2022	SB2022062120 SB2022062125 SB2022062236 and 135 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-24407	CWE-89	High	No	No	8.8.15 Patch 33, 9.0.0 Patch 26	24.02.2022	SB2022022409 SB2022022410 SB2022022421 and 67 more

Showing elements 41 - 60 out of 46