CVE-2016-9924
CriticalSummary
Zimbra Collaboration Suite (ZCS) before version 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.
Risk Assessment
XXE attacks can lead to the disclosure of sensitive information and potential remote code execution, posing a serious security threat to the system.
Recommendation
It is recommended to upgrade Zimbra Collaboration Suite to version 8.7.4 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Zimbra Collaboration Suite (ZCS)
See all- CVE-2017-6821Critical
Directory traversal vulnerability in Zimbra Collaboration Suite (ZCS) before version 8.7.6 allows attackers to have unspecified impact via unknown vectors.
- CVE-2017-6813Critical
A service provided by Zimbra Collaboration Suite (ZCS) before version 8.7.6 fails to require needed privileges before performing a few requested operations.
Original NVD description (English source)
Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.