The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers to hijack the authentication of administrators for requests that (1) add, (2) modify, or (3) remove accounts by leveraging failure to use of a CSRF token and perform referer header checks, aka bugs 100885 and 100899.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 10, 2025 | May 17, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub