CVE-2021-35209

概要

参考情報

• blog.sonarsource.com/zimbra-webmail-compromise-via-email · Exploit
• wiki.zimbra.com/wiki/Security_Center · Release Notes
• wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P23 · Release Notes
• wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P16 · Release Notes
• wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory

collaboration のその他の脆弱性

• CVE-2025-67809中 4.7An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly acces…
• CVE-2024-45515中 6.1An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in Zimbra webmail due …
• CVE-2025-27914中 5.4An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross-Site Scripting (XSS) vulnerability exists in …
• CVE-2024-45518高 8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before P…
• CVE-2024-33536中 5.4An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res p…