CVE-2018-10939

MEDIUM 6.1CVE-2018-10939 · Published 30/05/2018 · updated 17/06/2026

In short

CVE-2018-10939 is a MEDIUM (CVSS 6.1) vulnerability affecting zimbra collaboration suite (synacor), zimbra collaboration suite (zimbra).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
zimbra collaboration suite synacor	`= 8.7.11= 8.8.8≥ 8.7.0, ≤ 8.7.11≥ 8.8.0, ≤ 8.8.8`	No fix yet
zimbra collaboration suite zimbra	`= 8.8.8`	No fix yet

Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

In short

CVE-2018-10939 is a MEDIUM (CVSS 6.1) vulnerability affecting zimbra collaboration suite (synacor), zimbra collaboration suite (zimbra).

Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.3% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

= 8.7.11= 8.8.8≥ 8.7.0, ≤ 8.7.11≥ 8.8.0, ≤ 8.8.8

No fix yet

= 8.8.8

No fix yet

More vulnerabilities in zimbra collaboration suite

See all →