| Package | Affected versions | Patched versions |
|---|---|---|
| collaboration | = 8.8.15= 9.0.0 |
In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free