PT-2019-7208 · Synacor · Zimbra Mail Client

Published 2019-05-30 · Updated 2019-05-31 · CVE-2015-7609

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Synacor Zimbra Mail Client version 8.6 before 8.6.0 Patch 5

Description The issue concerns a problem with the error/warning dialog and email body content in Zimbra, allowing for XSS.

Recommendations For Synacor Zimbra Mail Client version 8.6 before 8.6.0 Patch 5, update to 8.6.0 Patch 5 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-7609

Affected Products

Zimbra Mail Client

References · 8

• 🔥 https://bugzilla.zimbra.com/show_bug.cgi?id=101435 · Exploit
• https://wiki.zimbra.com/wiki/Security_Center · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7609 · Security Note
• https://fortiguard.com/zeroday/FG-VD-15-081 · Note
• https://fortiguard.com/zeroday/FG-VD-15-080 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7609 · Note
• https://bugzilla.zimbra.com/show_bug.cgi?id=101436 · Note
• https://t.me/cibsecurity/4611 · Telegram Post