Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"fixed": "8.6.0"
},
{
"fixed": "8.6.0"
},
{
"fixed": "8.6.0"
},
{
"fixed": "8.6.0"
}
],
"cpes": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*"
],
"vendor_product": "synacor:zimbra_collaboration_suite",
"source": "CPE_RANGE"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch10:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch11:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch12:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch8:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch9:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch9:*:*:*:*:*:*"
],
"vendor_product": "synacor:zimbra_collaboration_suite",
"extracted_events": [
{
"introduced": "8.6.0-NA"
},
{
"last_affected": "8.6.0-NA"
},
{
"introduced": "8.6.0-NA"
},
{
"last_affected": "8.6.0-NA"
},
{
"introduced": "8.6.0-NA"
},
{
"last_affected": "8.6.0-NA"
},
{
"introduced": "8.6.0-NA"
},
{
"last_affected": "8.6.0-NA"
},
{
"introduced": "8.6.0-patch1"
},
{
"last_affected": "8.6.0-patch1"
},
{
"introduced": "8.6.0-patch1"
},
{
"last_affected": "8.6.0-patch1"
},
{
"introduced": "8.6.0-patch1"
},
{
"last_affected": "8.6.0-patch1"
},
{
"introduced": "8.6.0-patch1"
},
{
"last_affected": "8.6.0-patch1"
},
{
"introduced": "8.6.0-patch10"
},
{
"last_affected": "8.6.0-patch10"
},
{
"introduced": "8.6.0-patch10"
},
{
"last_affected": "8.6.0-patch10"
},
{
"introduced": "8.6.0-patch10"
},
{
"last_affected": "8.6.0-patch10"
},
{
"introduced": "8.6.0-patch10"
},
{
"last_affected": "8.6.0-patch10"
},
{
"introduced": "8.6.0-patch11"
},
{
"last_affected": "8.6.0-patch11"
},
{
"introduced": "8.6.0-patch11"
},
{
"last_affected": "8.6.0-patch11"
},
{
"introduced": "8.6.0-patch11"
},
{
"last_affected": "8.6.0-patch11"
},
{
"introduced": "8.6.0-patch11"
},
{
"last_affected": "8.6.0-patch11"
},
{
"introduced": "8.6.0-patch12"
},
{
"last_affected": "8.6.0-patch12"
},
{
"introduced": "8.6.0-patch12"
},
{
"last_affected": "8.6.0-patch12"
},
{
"introduced": "8.6.0-patch12"
},
{
"last_affected": "8.6.0-patch12"
},
{
"introduced": "8.6.0-patch12"
},
{
"last_affected": "8.6.0-patch12"
},
{
"introduced": "8.6.0-patch2"
},
{
"last_affected": "8.6.0-patch2"
},
{
"introduced": "8.6.0-patch2"
},
{
"last_affected": "8.6.0-patch2"
},
{
"introduced": "8.6.0-patch2"
},
{
"last_affected": "8.6.0-patch2"
},
{
"introduced": "8.6.0-patch2"
},
{
"last_affected": "8.6.0-patch2"
},
{
"introduced": "8.6.0-patch3"
},
{
"last_affected": "8.6.0-patch3"
},
{
"introduced": "8.6.0-patch3"
},
{
"last_affected": "8.6.0-patch3"
},
{
"introduced": "8.6.0-patch3"
},
{
"last_affected": "8.6.0-patch3"
},
{
"introduced": "8.6.0-patch3"
},
{
"last_affected": "8.6.0-patch3"
},
{
"introduced": "8.6.0-patch4"
},
{
"last_affected": "8.6.0-patch4"
},
{
"introduced": "8.6.0-patch4"
},
{
"last_affected": "8.6.0-patch4"
},
{
"introduced": "8.6.0-patch4"
},
{
"last_affected": "8.6.0-patch4"
},
{
"introduced": "8.6.0-patch4"
},
{
"last_affected": "8.6.0-patch4"
},
{
"introduced": "8.6.0-patch5"
},
{
"last_affected": "8.6.0-patch5"
},
{
"introduced": "8.6.0-patch5"
},
{
"last_affected": "8.6.0-patch5"
},
{
"introduced": "8.6.0-patch5"
},
{
"last_affected": "8.6.0-patch5"
},
{
"introduced": "8.6.0-patch5"
},
{
"last_affected": "8.6.0-patch5"
},
{
"introduced": "8.6.0-patch6"
},
{
"last_affected": "8.6.0-patch6"
},
{
"introduced": "8.6.0-patch6"
},
{
"last_affected": "8.6.0-patch6"
},
{
"introduced": "8.6.0-patch6"
},
{
"last_affected": "8.6.0-patch6"
},
{
"introduced": "8.6.0-patch6"
},
{
"last_affected": "8.6.0-patch6"
},
{
"introduced": "8.6.0-patch7"
},
{
"last_affected": "8.6.0-patch7"
},
{
"introduced": "8.6.0-patch7"
},
{
"last_affected": "8.6.0-patch7"
},
{
"introduced": "8.6.0-patch7"
},
{
"last_affected": "8.6.0-patch7"
},
{
"introduced": "8.6.0-patch7"
},
{
"last_affected": "8.6.0-patch7"
},
{
"introduced": "8.6.0-patch8"
},
{
"last_affected": "8.6.0-patch8"
},
{
"introduced": "8.6.0-patch8"
},
{
"last_affected": "8.6.0-patch8"
},
{
"introduced": "8.6.0-patch8"
},
{
"last_affected": "8.6.0-patch8"
},
{
"introduced": "8.6.0-patch8"
},
{
"last_affected": "8.6.0-patch8"
},
{
"introduced": "8.6.0-patch9"
},
{
"last_affected": "8.6.0-patch9"
},
{
"introduced": "8.6.0-patch9"
},
{
"last_affected": "8.6.0-patch9"
},
{
"introduced": "8.6.0-patch9"
},
{
"last_affected": "8.6.0-patch9"
},
{
"introduced": "8.6.0-patch9"
},
{
"last_affected": "8.6.0-patch9"
},
{
"introduced": "8.8.9-patch6"
},
{
"last_affected": "8.8.9-patch6"
},
{
"introduced": "8.8.9-patch6"
},
{
"last_affected": "8.8.9-patch6"
},
{
"introduced": "8.8.9-patch6"
},
{
"last_affected": "8.8.9-patch6"
},
{
"introduced": "8.8.9-patch6"
},
{
"last_affected": "8.8.9-patch6"
},
{
"introduced": "8.8.9-patch9"
},
{
"last_affected": "8.8.9-patch9"
},
{
"introduced": "8.8.9-patch9"
},
{
"last_affected": "8.8.9-patch9"
},
{
"introduced": "8.8.9-patch9"
},
{
"last_affected": "8.8.9-patch9"
},
{
"introduced": "8.8.9-patch9"
},
{
"last_affected": "8.8.9-patch9"
},
{
"introduced": "8.8.11-patch1"
},
{
"last_affected": "8.8.11-patch1"
},
{
"introduced": "8.8.11-patch1"
},
{
"last_affected": "8.8.11-patch1"
},
{
"introduced": "8.8.11-patch1"
},
{
"last_affected": "8.8.11-patch1"
},
{
"introduced": "8.8.11-patch1"
},
{
"last_affected": "8.8.11-patch1"
}
]
}
]
}{
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch10:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch8:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch9:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch3:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.7.0"
},
{
"fixed": "8.7.11"
},
{
"introduced": "8.8.0"
},
{
"fixed": "8.8.9"
},
{
"introduced": "8.7.11-NA"
},
{
"last_affected": "8.7.11-NA"
},
{
"introduced": "8.7.11-patch1"
},
{
"last_affected": "8.7.11-patch1"
},
{
"introduced": "8.7.11-patch10"
},
{
"last_affected": "8.7.11-patch10"
},
{
"introduced": "8.7.11-patch2"
},
{
"last_affected": "8.7.11-patch2"
},
{
"introduced": "8.7.11-patch3"
},
{
"last_affected": "8.7.11-patch3"
},
{
"introduced": "8.7.11-patch4"
},
{
"last_affected": "8.7.11-patch4"
},
{
"introduced": "8.7.11-patch5"
},
{
"last_affected": "8.7.11-patch5"
},
{
"introduced": "8.7.11-patch6"
},
{
"last_affected": "8.7.11-patch6"
},
{
"introduced": "8.7.11-patch7"
},
{
"last_affected": "8.7.11-patch7"
},
{
"introduced": "8.7.11-patch8"
},
{
"last_affected": "8.7.11-patch8"
},
{
"introduced": "8.7.11-patch9"
},
{
"last_affected": "8.7.11-patch9"
},
{
"introduced": "8.8.9-NA"
},
{
"last_affected": "8.8.9-NA"
},
{
"introduced": "8.8.9-patch1"
},
{
"last_affected": "8.8.9-patch1"
},
{
"introduced": "8.8.9-patch3"
},
{
"last_affected": "8.8.9-patch3"
},
{
"introduced": "8.8.10-NA"
},
{
"last_affected": "8.8.10-NA"
},
{
"introduced": "8.8.11-NA"
},
{
"last_affected": "8.8.11-NA"
},
{
"introduced": "8.8.11-patch3"
},
{
"last_affected": "8.8.11-patch3"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}{
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch10:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch8:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch9:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch8:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch3:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.7.0"
},
{
"fixed": "8.7.11"
},
{
"introduced": "8.8.0"
},
{
"fixed": "8.8.9"
},
{
"introduced": "8.7.11-NA"
},
{
"last_affected": "8.7.11-NA"
},
{
"introduced": "8.7.11-patch1"
},
{
"last_affected": "8.7.11-patch1"
},
{
"introduced": "8.7.11-patch10"
},
{
"last_affected": "8.7.11-patch10"
},
{
"introduced": "8.7.11-patch2"
},
{
"last_affected": "8.7.11-patch2"
},
{
"introduced": "8.7.11-patch3"
},
{
"last_affected": "8.7.11-patch3"
},
{
"introduced": "8.7.11-patch4"
},
{
"last_affected": "8.7.11-patch4"
},
{
"introduced": "8.7.11-patch5"
},
{
"last_affected": "8.7.11-patch5"
},
{
"introduced": "8.7.11-patch6"
},
{
"last_affected": "8.7.11-patch6"
},
{
"introduced": "8.7.11-patch7"
},
{
"last_affected": "8.7.11-patch7"
},
{
"introduced": "8.7.11-patch8"
},
{
"last_affected": "8.7.11-patch8"
},
{
"introduced": "8.7.11-patch9"
},
{
"last_affected": "8.7.11-patch9"
},
{
"introduced": "8.8.9-NA"
},
{
"last_affected": "8.8.9-NA"
},
{
"introduced": "8.8.9-p5"
},
{
"last_affected": "8.8.9-p5"
},
{
"introduced": "8.8.9-patch1"
},
{
"last_affected": "8.8.9-patch1"
},
{
"introduced": "8.8.9-patch2"
},
{
"last_affected": "8.8.9-patch2"
},
{
"introduced": "8.8.9-patch3"
},
{
"last_affected": "8.8.9-patch3"
},
{
"introduced": "8.8.9-patch4"
},
{
"last_affected": "8.8.9-patch4"
},
{
"introduced": "8.8.9-patch7"
},
{
"last_affected": "8.8.9-patch7"
},
{
"introduced": "8.8.9-patch8"
},
{
"last_affected": "8.8.9-patch8"
},
{
"introduced": "8.8.10-NA"
},
{
"last_affected": "8.8.10-NA"
},
{
"introduced": "8.8.10-patch1"
},
{
"last_affected": "8.8.10-patch1"
},
{
"introduced": "8.8.10-patch2"
},
{
"last_affected": "8.8.10-patch2"
},
{
"introduced": "8.8.10-patch3"
},
{
"last_affected": "8.8.10-patch3"
},
{
"introduced": "8.8.10-patch4"
},
{
"last_affected": "8.8.10-patch4"
},
{
"introduced": "8.8.10-patch6"
},
{
"last_affected": "8.8.10-patch6"
},
{
"introduced": "8.8.10-patch7"
},
{
"last_affected": "8.8.10-patch7"
},
{
"introduced": "8.8.11-NA"
},
{
"last_affected": "8.8.11-NA"
},
{
"introduced": "8.8.11-patch2"
},
{
"last_affected": "8.8.11-patch2"
},
{
"introduced": "8.8.11-patch3"
},
{
"last_affected": "8.8.11-patch3"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}{
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.7.0"
},
{
"fixed": "8.7.11"
},
{
"introduced": "8.8.0"
},
{
"fixed": "8.8.9"
},
{
"introduced": "8.7.11-NA"
},
{
"last_affected": "8.7.11-NA"
},
{
"introduced": "8.7.11-patch1"
},
{
"last_affected": "8.7.11-patch1"
},
{
"introduced": "8.8.9-NA"
},
{
"last_affected": "8.8.9-NA"
},
{
"introduced": "8.8.10-NA"
},
{
"last_affected": "8.8.10-NA"
},
{
"introduced": "8.8.11-NA"
},
{
"last_affected": "8.8.11-NA"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}{
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*"
],
"source": [
"CPE_RANGE",
"CPE_STRING"
],
"extracted_events": [
{
"introduced": "8.7.0"
},
{
"fixed": "8.7.11"
},
{
"introduced": "8.8.0"
},
{
"fixed": "8.8.9"
},
{
"introduced": "8.7.11-NA"
},
{
"last_affected": "8.7.11-NA"
},
{
"introduced": "8.7.11-patch3"
},
{
"last_affected": "8.7.11-patch3"
},
{
"introduced": "8.7.11-patch4"
},
{
"last_affected": "8.7.11-patch4"
},
{
"introduced": "8.8.9-NA"
},
{
"last_affected": "8.8.9-NA"
},
{
"introduced": "8.8.9-patch3"
},
{
"last_affected": "8.8.9-patch3"
},
{
"introduced": "8.8.10-NA"
},
{
"last_affected": "8.8.10-NA"
},
{
"introduced": "8.8.11-NA"
},
{
"last_affected": "8.8.11-NA"
}
]
}