CVE-2020-35123

Published: Dec 17, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17.

Affected (28)

Products: Zimbra: Collaboration

Zimbra

1 product

Collaboration

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Zimbra Collaboration	After 8.8.0 to 8.8.15
Zimbra Collaboration	Version 8.8.15
Zimbra Collaboration	Version 8.8.15 p10
Zimbra Collaboration	Version 8.8.15 p11
Zimbra Collaboration	Version 8.8.15 p12
Zimbra Collaboration	Version 8.8.15 p13
Zimbra Collaboration	Version 8.8.15 p14
Zimbra Collaboration	Version 8.8.15 p15
Zimbra Collaboration	Version 8.8.15 p16
Zimbra Collaboration	Version 8.8.15 p1
Zimbra Collaboration	Version 8.8.15 p2
Zimbra Collaboration	Version 8.8.15 p3
Zimbra Collaboration	Version 8.8.15 p4
Zimbra Collaboration	Version 8.8.15 p5
Zimbra Collaboration	Version 8.8.15 p6
Zimbra Collaboration	Version 8.8.15 p7
Zimbra Collaboration	Version 8.8.15 p8
Zimbra Collaboration	Version 8.8.15 p9
Zimbra Collaboration	Version 9.0.0
Zimbra Collaboration	Version 9.0.0 p1
Zimbra Collaboration	Version 9.0.0 p2
Zimbra Collaboration	Version 9.0.0 p3
Zimbra Collaboration	Version 9.0.0 p4
Zimbra Collaboration	Version 9.0.0 p5
Zimbra Collaboration	Version 9.0.0 p6
Zimbra Collaboration	Version 9.0.0 p7
Zimbra Collaboration	Version 9.0.0 p8
Zimbra Collaboration	Version 9.0.0 p9