CVE-2018-14013 Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting · CloudMap

中危CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting

披露于 2019/05/29 · 更新于 2025/07/17

CVSS 评分6.1/ 10.0

EPSS 概率39.8%百分位 97.2%

漏洞描述

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 is vulnerable to cross-site scripting via the AJAX and html web clients.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 zimbra 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-27924 Zimbra Collaboration Suite - Memcached Command Injection zimbra	高危	—	—	PoCEXP	2026/01/14
CVE-2025-68645 Zimbra Collaboration - Local File Inclusion zimbra	高危	8.8	—	PoCEXP	2025/12/22
CVE-2024-45519RCE Zimbra Collaboration Suite < 9.0.0 - Remote Code Execution zimbra	严重	10.0	94.2%	PoCEXP	2024/05/22
zimbra_preauth_ssrf Zimbra Collaboration Suite - Server-Side Request Forgery zimbra	严重	9.8	—	PoCEXP	2023/10/20
CVE-2023-37580RCE Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting zimbra	中危	6.1	93.9%	PoCEXP	2023/08/01
CVE-2023-34192 Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting zimbra	严重	9.0	85.5%	PoCEXP	2023/07/07