Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2534▼ 359 respecto a la semana anterior

Críticas / altas1338▲ 69 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-11318	Modificada	Media (5.4)	1.1%	—	Synacor Zimbra Collaboration Server	27/1/2020	17/6/2026	Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.
CVE-2015-2249	Modificada	Media (5.4)	0.69%	—	Synacor Zimbra Collaboration Server	27/1/2020	17/6/2026	Zimbra Collaboration before 8.6.0 patch5 has XSS.
CVE-2014-8563	Modificada	Crítica (9.8)	2.5%	—	Synacor Zimbra Collaboration Server	27/1/2020	17/6/2026	Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
CVE-2014-5500	Modificada	Media (6.1)	0.83%	—	Synacor Zimbra Collaboration Server	27/1/2020	17/6/2026	Synacor Zimbra Collaboration before 8.0.8 has XSS.
CVE-2015-2230	Modificada	Media (6.1)	0.81%	—	Synacor Zimbra Collaboration Server	30/5/2019	17/6/2026	Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.
CVE-2016-5721	Modificada	Media (6.1)	1.1%	—	Zimbra Collaboration Server	29/8/2016	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-6541	Modificada	Alta (8.8)	3.0%	—	Zimbra Collaboration Server	8/4/2016	17/6/2026	Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest.