CVE-2018-20160

Published: May 29, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.

Affected (25)

Products: Synacor: Zimbra Collaboration Suite

Synacor

1 product

Zimbra Collaboration Suite

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Synacor Zimbra Collaboration Suite	From 8.7.0 to 8.7.11
Synacor Zimbra Collaboration Suite	From 8.8.0 to 8.8.9
Synacor Zimbra Collaboration Suite	Version 8.7.11
Synacor Zimbra Collaboration Suite	Version 8.7.11 p1
Synacor Zimbra Collaboration Suite	Version 8.7.11 p2
Synacor Zimbra Collaboration Suite	Version 8.7.11 p3
Synacor Zimbra Collaboration Suite	Version 8.7.11 p4
Synacor Zimbra Collaboration Suite	Version 8.7.11 p5
Synacor Zimbra Collaboration Suite	Version 8.7.11 p6
Synacor Zimbra Collaboration Suite	Version 8.7.11 p7
Synacor Zimbra Collaboration Suite	Version 8.7.11 p8
Synacor Zimbra Collaboration Suite	Version 8.7.11 p9
Synacor Zimbra Collaboration Suite	Version 8.8.10
Synacor Zimbra Collaboration Suite	Version 8.8.10 p2
Synacor Zimbra Collaboration Suite	Version 8.8.10 p3
Synacor Zimbra Collaboration Suite	Version 8.8.10 p4
Synacor Zimbra Collaboration Suite	Version 8.8.11
Synacor Zimbra Collaboration Suite	Version 8.8.9
Synacor Zimbra Collaboration Suite	Version 8.8.9 p1
Synacor Zimbra Collaboration Suite	Version 8.8.9 p2
Synacor Zimbra Collaboration Suite	Version 8.8.9 p3
Synacor Zimbra Collaboration Suite	Version 8.8.9 p4
Synacor Zimbra Collaboration Suite	Version 8.8.9 p6
Synacor Zimbra Collaboration Suite	Version 8.8.9 p7
Synacor Zimbra Collaboration Suite	Version 8.8.9 p8