Zimbra Multiple Vulnerabilities
Release Date: 7 Nov 2025
RISK: Medium Risk
TYPE: Servers - Internet App Servers
Multiple vulnerabilities were identified in Zimbra. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, spoofing, security restriction bypass and sensitive information disclosure on the targeted system.
Impact
- Security Restriction Bypass
- Spoofing
- Information Disclosure
- Cross-Site Scripting
System / Technologies affected
- Zimbra Daffodil prior to 10.0.18
- Zimbra Daffodil prior to 10.1.13
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.13#Security_Fixes
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.18#Security_Fixes
Vulnerability Identifier
- No CVE information is available
沒有留言:
發佈留言