Synacor Zimbra Vulnérabilités

Chronologie

L'année dernière

Version

8.031
8.131
8.231
8.331
8.431

Contre-mesures

Official Fix77
Temporary Fix0
Workaround1
Unavailable0
Not Defined25

Exploitabilité

High11
Functional0
Proof-of-Concept4
Unproven0
Not Defined88

Vecteur d'accès

Not Defined0
Physical0
Local1
Adjacent12
Network90

Authentification

Not Defined0
High4
Low45
None54

Interaction de l'utilisateur

Not Defined0
Required54
None49

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤47
≤525
≤633
≤719
≤89
≤99
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤47
≤532
≤627
≤720
≤87
≤99
≤101

VulDB

≤10
≤20
≤33
≤423
≤535
≤620
≤76
≤812
≤93
≤101

NVD

≤10
≤20
≤30
≤40
≤52
≤68
≤741
≤815
≤95
≤1012

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k39
<2k43
<5k20
<10k1
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k100
<2k3
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (78): 1, 8.0, 8.0.9, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.6 Patch 12, 8.6.0 Patch 1, 8.6.0 Patch 4, 8.6.0 Patch 6, 8.6.0 Patch 9, 8.7, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.7.5, 8.7.6, 8.7.7, 8.7.8, 8.7.9, 8.7.11 Patch 1, 8.7.11 Patch 2, 8.7.11 Patch 3, 8.7.11 Patch 5, 8.7.11 Patch 6, 8.7.11 Patch 9, 8.7.11.Patch1, 8.7.11.Patch2, 8.7.11p9, 8.8, 8.8.0 Beta 1, 8.8.0 Beta1, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.8.6, 8.8.7, 8.8.8, 8.8.8 Patch 3, 8.8.8 Patch 6, 8.8.8 Patch 8, 8.8.9, 8.8.9 Patch 2, 8.8.10 Patch 1, 8.8.10 Patch 6, 8.8.11, 8.8.11 Patch 2, 8.8.11P1, 8.8.12, 8.8.13, 8.8.14, 8.8.14 Patch 41, 8.8.15, 8.8.15 P16, 8.8.15 Patch 1, 8.8.15 Patch 4, 8.8.15 Patch 6, 8.8.15 Patch 9, 8.8.15 Patch 22, 8.8.15 Patch 29, 8.8.15 Patch 42, 8.8.15.p7, 9.0, 9.0.0 P9, 9.0.0 Patch 2, 9.0.0 Patch 15, 9.0.0 Patch 33, 9.0.0 Patch 34, 9.0.0 Patch 35, 10.0.1, 10.0.2, 10.0.3

Link to Product Website: https://synacor.com/

Type de logiciel: Groupware Software

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
07/12/20234.84.7Synacor Zimbra cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-43103
07/12/20236.56.4Synacor Zimbra Collaboration Suite Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-41106
07/12/20234.84.7Synacor Zimbra Collaboration Suite cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2023-43102
31/07/20234.84.7Synacor Zimbra Collaboration Suite Classic Web Client cross site scripting$0-$5k$0-$5kHighOfficial Fix0.03CVE-2023-37580
31/07/20235.55.4Synacor Zimbra Collaboration Suite JSP File divulgation de l'information$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-38750
06/07/20236.26.2Synacor Zimbra Collaboration autoSaveDraft cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-34192
06/07/20237.67.6Synacor Zimbra Collaboration sfdc_preauth.jsp Privilege Escalation$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2023-29382
06/07/20236.16.1Synacor Zimbra Collaboration File Upload ClientUploader divulgation de l'information$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-34193
06/07/20237.07.0Synacor Zimbra Collaboration divulgation de l'information$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-29381
16/06/20237.87.8Synacor Zimbra Collaboration elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-24032
16/06/20234.84.8Synacor Zimbra Collaboration Webmail cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-24031
16/06/20234.34.3Synacor Zimbra Collaboration preauth Redirect$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-24030
07/01/20234.84.8Synacor Zimbra Collaboration Suite Webmail URL cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2022-45913
07/01/20235.25.2Synacor Zimbra Collaboration Suite Classic UI Login Page cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.07CVE-2022-45911
06/12/20224.74.6Synacor Zimbra Collaboration Suite ClientUploader elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-45912
18/10/20228.38.3Synacor Zimbra Collaboration Suite Postfix Privilege Escalation$0-$5k$0-$5kHighOfficial Fix0.00CVE-2022-3569
13/10/20224.84.8Synacor Zimbra Collaboration Suite calendar cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-41351
13/10/20224.84.8Synacor Zimbra Collaboration Suite cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-41350
13/10/20224.84.8Synacor Zimbra Collaboration Suite IMG Element divulgation de l'information$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-41348
26/09/20228.38.3Synacor Zimbra Collaboration Suite Nginx elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2022-41347
26/09/20227.67.6Synacor Zimbra Collaboration Suite amavisd public elévation de privilèges$0-$5k$0-$5kHighNot Defined0.04CVE-2022-41352
17/08/20228.38.3Synacor Zimbra Collaboration Suite sudo Configuration zmslapd elévation de privilèges$0-$5k$0-$5kHighOfficial Fix0.04CVE-2022-37393
12/08/20223.53.5Synacor Zimbra Collaboration Suite cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2022-37044
12/08/20226.36.3Synacor Zimbra Collaboration Suite Header ProxyServlet.java elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2022-37041
12/08/20224.34.3Synacor Zimbra Collaboration Suite cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2022-37043

78 plus d'entrées ne sont pas affichées

plus d'entrées par Synacor

Interested in the pricing of exploits?

See the underground prices here!