CVE-2015-7610

HIGH 8.8CVE-2015-7610 · Published 30/05/2018 · updated 17/06/2026

In short

CVE-2015-7610 is a HIGH (CVSS 8.8) vulnerability affecting zimbra collaboration suite (synacor), zimbra collaboration suite (zimbra).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
zimbra collaboration suite synacor	`= 8.6.0= 8.7.11≥ 8.7.0, ≤ 8.7.11≥ 8.8.0, ≤ 8.8.8`	No fix yet
zimbra collaboration suite zimbra	`= 8.6.0`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF token.

References

More vulnerabilities in zimbra collaboration suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2015-7610 is a HIGH (CVSS 8.8) vulnerability affecting zimbra collaboration suite (synacor), zimbra collaboration suite (zimbra).

Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.0% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

zimbra collaboration suite

synacor

= 8.6.0= 8.7.11≥ 8.7.0, ≤ 8.7.11≥ 8.8.0, ≤ 8.8.8

No fix yet

zimbra collaboration suite

zimbra

= 8.6.0

No fix yet

Description

More vulnerabilities in zimbra collaboration suite

See all →