CyberSec.Space Logo
Back to CVE Browser

CVE-2016-9924

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.2000%
EPSS Percentile38.34th
PublishedMar 29, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.

Affected Platforms (CPE)

📦
Synacor

Zimbra Collaboration Suite

<= 8.7.3

References & Advisories

🔗 http://www.securityfocus.com/bid/97121
🔗 https://wiki.zimbra.com/wiki/Security_Center
🔗 http://www.securityfocus.com/bid/97121
🔗 https://wiki.zimbra.com/wiki/Security_Center

Related Vulnerabilities

CVE-2019-96709.8

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnera...

CVE-2018-201609.8

ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other ...

CVE-2019-69809.8

Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.

CVE-2020-77969.8

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.