CVE-2016-9924

Critical

Published: 29/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Zimbra Collaboration Suite (ZCS) before version 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.

XXE attacks can lead to the disclosure of sensitive information and potential remote code execution, posing a serious security threat to the system.

It is recommended to upgrade Zimbra Collaboration Suite to version 8.7.4 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.