Synacor Zimbra Collaboration Suite Schwachstellen

Zeitverlauf

Version

9.0	9
8.8.15	8
8.8.15 Patch 22	4
8.8.0	4
8.8.1	4

Massnahmen

Official Fix	21
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	15

Ausnutzbarkeit

High	4
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	32

Zugriffsart

Not Defined	0
Physical	0
Local	0
Adjacent	8
Network	28

Authentisierung

Not Defined	0
High	2
Low	22
None	12

Benutzeraktivität

Not Defined	0
Required	16
None	20

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	9
≤6	10
≤7	4
≤8	2
≤9	6
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	10
≤6	9
≤7	4
≤8	2
≤9	6
≤10	1

VulDB

≤1	0
≤2	0
≤3	1
≤4	10
≤5	8
≤6	6
≤7	3
≤8	4
≤9	3
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	2
≤7	12
≤8	5
≤9	0
≤10	6

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	10
<2k	19
<5k	7
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	34
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (47): 1, 8.0, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.6.0 Patch 1, 8.7, 8.7.11 Patch 5, 8.7.11 Patch 6, 8.7.11p9, 8.8, 8.8.0 Beta 1, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.8.6, 8.8.7, 8.8.8, 8.8.8 Patch 6, 8.8.8 Patch 8, 8.8.9, 8.8.9 Patch 2, 8.8.10 Patch 1, 8.8.11, 8.8.14 Patch 41, 8.8.15, 8.8.15 P16, 8.8.15 Patch 1, 8.8.15 Patch 4, 8.8.15 Patch 6, 8.8.15 Patch 22, 8.8.15 Patch 29, 8.8.15 Patch 42, 9.0, 9.0.0 P9, 9.0.0 Patch 15, 9.0.0 Patch 33, 9.0.0 Patch 34, 9.0.0 Patch 35, 10.0.1, 10.0.2, 10.0.3

Link to Product Website: https://synacor.com/

Softwaretyp: Groupware Software

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
07.12.2023	6.5	6.4	Synacor Zimbra Collaboration Suite Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-41106
07.12.2023	4.8	4.7	Synacor Zimbra Collaboration Suite Cross Site Scripting	$0-$5k	Wird berechnet	Not Defined	Official Fix	0.00	CVE-2023-43102
31.07.2023	4.8	4.7	Synacor Zimbra Collaboration Suite Classic Web Client Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-37580
31.07.2023	5.5	5.4	Synacor Zimbra Collaboration Suite JSP File Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-38750
07.01.2023	4.8	4.8	Synacor Zimbra Collaboration Suite Webmail URL Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-45913
07.01.2023	5.2	5.2	Synacor Zimbra Collaboration Suite Classic UI Login Page Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2022-45911
06.12.2022	4.7	4.6	Synacor Zimbra Collaboration Suite ClientUploader erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-45912
18.10.2022	8.3	8.3	Synacor Zimbra Collaboration Suite Postfix Privilege Escalation	$0-$5k	$0-$5k	High	Official Fix	0.02	CVE-2022-3569
13.10.2022	4.8	4.8	Synacor Zimbra Collaboration Suite calendar Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-41351
13.10.2022	4.8	4.8	Synacor Zimbra Collaboration Suite Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-41350