CVE-2019-6981: SSRF
First published: Wed May 29 2019(Updated: )
Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Synacor Zimbra Collaboration Suite | >=8.7.0<8.7.11 | |
| Synacor Zimbra Collaboration Suite | >=8.8.0<8.8.9 | |
| Synacor Zimbra Collaboration Suite | =8.7.11 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p1 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p10 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p2 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p3 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p4 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p5 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p6 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p7 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p8 | |
| Synacor Zimbra Collaboration Suite | =8.7.11-p9 | |
| Synacor Zimbra Collaboration Suite | =8.8.9 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p1 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p2 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p3 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p4 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p6 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p7 | |
| Synacor Zimbra Collaboration Suite | =8.8.9-p8 | |
| Synacor Zimbra Collaboration Suite | =8.8.10 | |
| Synacor Zimbra Collaboration Suite | =8.8.10-p2 | |
| Synacor Zimbra Collaboration Suite | =8.8.10-p3 | |
| Synacor Zimbra Collaboration Suite | =8.8.10-p4 | |
| Synacor Zimbra Collaboration Suite | =8.8.10-p6 | |
| Synacor Zimbra Collaboration Suite | =8.8.11 | |
| Synacor Zimbra Collaboration Suite | =8.8.11-p2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Zimbra Collaboration Suite?
The vulnerability ID for Zimbra Collaboration Suite is CVE-2019-6981.
What is the severity rating of CVE-2019-6981?
The severity rating of CVE-2019-6981 is medium (6.5).
Which versions of Zimbra Collaboration Suite are affected by CVE-2019-6981?
Zimbra Collaboration Suite versions 8.7.x through 8.8.11 are affected by CVE-2019-6981.
What is the impact of CVE-2019-6981?
CVE-2019-6981 allows blind SSRF (Server-Side Request Forgery) in the Feed component of Zimbra Collaboration Suite, which can be exploited by attackers to make requests to internal network resources.
Are there any references for CVE-2019-6981?
Yes, you can find references for CVE-2019-6981 at the following links: [Bugzilla](https://bugzilla.zimbra.com/show_bug.cgi?id=109096) and [Zimbra Security Advisories](https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories).
- collector/nvd-index
- agent/tags
- agent/event
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/synacor
- canonical/synacor zimbra collaboration suite
- version/synacor zimbra collaboration suite/8.7.0
- version/synacor zimbra collaboration suite/8.8.0
- version/synacor zimbra collaboration suite/8.7.11
- version/synacor zimbra collaboration suite/8.7.11-p1
- version/synacor zimbra collaboration suite/8.7.11-p10
- version/synacor zimbra collaboration suite/8.7.11-p2
- version/synacor zimbra collaboration suite/8.7.11-p3
- version/synacor zimbra collaboration suite/8.7.11-p4
- version/synacor zimbra collaboration suite/8.7.11-p5
- version/synacor zimbra collaboration suite/8.7.11-p6
- version/synacor zimbra collaboration suite/8.7.11-p7
- version/synacor zimbra collaboration suite/8.7.11-p8
- version/synacor zimbra collaboration suite/8.7.11-p9
- version/synacor zimbra collaboration suite/8.8.9
- version/synacor zimbra collaboration suite/8.8.9-p1
- version/synacor zimbra collaboration suite/8.8.9-p2
- version/synacor zimbra collaboration suite/8.8.9-p3
- version/synacor zimbra collaboration suite/8.8.9-p4
- version/synacor zimbra collaboration suite/8.8.9-p6
- version/synacor zimbra collaboration suite/8.8.9-p7
- version/synacor zimbra collaboration suite/8.8.9-p8
- version/synacor zimbra collaboration suite/8.8.10
- version/synacor zimbra collaboration suite/8.8.10-p2
- version/synacor zimbra collaboration suite/8.8.10-p3
- version/synacor zimbra collaboration suite/8.8.10-p4
- version/synacor zimbra collaboration suite/8.8.10-p6
- version/synacor zimbra collaboration suite/8.8.11
- version/synacor zimbra collaboration suite/8.8.11-p2