Known vulnerabilities in Zimbra Collaboration 9.0.0 Patch 37 - page 2

Vendor: Synacor Inc.

Software: Zimbra Collaboration

Version: 9.0.0 Patch 37

Software CPE: cpe:2.3:a:synacor:zimbra_collaboration:*:*:*:*:*:*:*:*

Website: https://www.zimbra.com/

Total vulnerabilities: 26

Public exploits: 2

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.3

Vulnerabilities (26)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84501 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Medium	No	No	9.0.0 Patch 38, 10.0.6	18.12.2023	SB2023121817
#VU84500 - Cryptographic Issues	CWE-310	Medium	No	No	8.8.15 Patch 45, 9.0.0 Patch 38, 10.0.6	18.12.2023	SB2023121817
#VU84494 - Exposure of sensitive information to an unauthorized actor CVE-2023-48432	CWE-200	Medium	No	No	8.8.15 Patch 45, 9.0.0 Patch 38, 10.0.6	18.12.2023	SB2023121817
#VU75260 - Improper input validation CVE-2023-21930	CWE-20	Medium	No	No	8.8.15 Patch 45, 9.0.0 Patch 38, 10.0.6	18.04.2023	SB20230418166 SB20230418167 SB2023041942 and 191 more
#VU62397 - Improper input validation CVE-2022-21449	CWE-20	Medium	Public exploit available	No	8.8.15 Patch 45, 9.0.0 Patch 38, 10.0.6	19.04.2022	SB2022041944 SB2022041945 SB2022042106 and 24 more
#VU62398 - Improper input validation CVE-2022-21476	CWE-20	Medium	No	No	8.8.15 Patch 45, 9.0.0 Patch 38, 10.0.6	19.04.2022	SB2022041944 SB2022041945 SB2022042102 and 69 more

Showing elements 21 - 40 out of 26