CVE-2019-11318

概要

参考情報

• bugzilla.zimbra.com/show_bug.cgi · Issue Tracking
• wiki.zimbra.com/wiki/Security_Center · Patch
• wiki.zimbra.com/wiki/Zimbra_Releases/8.8.12/P1 · Patch
• wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory

zimbra collaboration server のその他の脆弱性

• CVE-2015-2249中 5.4Zimbra Collaboration before 8.6.0 patch5 has XSS.
• CVE-2014-8563緊急 9.8Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
• CVE-2014-5500中 6.1Synacor Zimbra Collaboration before 8.0.8 has XSS.
• CVE-2015-2230中 6.1Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.