CVE-2017-6821
CriticalSummary
Directory traversal vulnerability in Zimbra Collaboration Suite (ZCS) before version 8.7.6 allows attackers to have unspecified impact via unknown vectors.
Risk Assessment
The organization may be exposed to unauthorized access to data or systems, potentially leading to serious security consequences.
Recommendation
It is recommended to update Zimbra Collaboration Suite to version 8.7.6 or later to mitigate this vulnerability.
Other vulnerabilities in Zimbra Collaboration Suite (ZCS)
See all- CVE-2017-6813Critical
A service provided by Zimbra Collaboration Suite (ZCS) before version 8.7.6 fails to require needed privileges before performing a few requested operations.
- CVE-2016-9924Critical
Zimbra Collaboration Suite (ZCS) before version 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.
- CVE-2026-93639High
A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet configuration through ConfigureZimletRequest. The configuration can add an attacker-controlled domain to the proxy allowlist of the default class of service; if a signed-in user opens a crafted /service/proxy URL, Zimbra serves attacker-controlled HTML under its own origin, enabling mailbox data theft and authenticated actions as the victim.
Original NVD description (English source)
Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vectors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS