← Back

Synacor

synacor

87 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Zimbra Collaboration Suite
zimbra_collaboration_suite
82 CVEs
Zimbra Collaboration Server
zimbra_collaboration_server
5 CVEs

CVEs (87)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-3406
1Synacor
1Zimbra Collaboration Suite
May 13, 2026
Jan 18, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader ext...Show more
Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader extension or (2) extension REST handlers, aka bugs 104294 and 104456.Show less
CVE-2016-3405
1Synacor
1Zimbra Collaboration Suite
May 13, 2026
Jan 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828.
CVE-2016-3404
1Synacor
1Zimbra Collaboration Suite
May 13, 2026
Jan 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959.
CVE-2016-3402
1Synacor
1Zimbra Collaboration Suite
May 13, 2026
Jan 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167.
CVE-2016-3401
1Synacor
1Zimbra Collaboration Suite
May 13, 2026
Jan 18, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
CVE-2013-7091
1Synacor
1Zimbra Collaboration Suite
Apr 29, 2026
Dec 13, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin...Show more
Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. NOTE: this can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service/admin/soap API.Show less
CVE-2013-5119
1Synacor
1Zimbra Collaboration Suite
Apr 29, 2026
Sep 23, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token.