CyberConfirmedMediumDeveloping

Critical command injection vulnerability identified in Zimbra Collaboration Suite

Zimbra has released patches for a critical command injection vulnerability affecting servers with SNMP notifications enabled, alongside fixes for four XSS flaws and a mail-forwarding bypass. The extent of active exploitation remains unconfirmed, but the severity of the injection flaw poses a significant risk to enterprise email infrastructure.

The Hacker Newsabout 8 hours agoCredibility 54%View source

Score Breakdown

Mosaic Score9.5

Confidence0.9

Significance0.5

Source credibility0.5

Intelligence Tags

#zimbra #vulnerability #cybersecurity #snmp #patch

Source

Part of a situation

developingCyber7m ago

Zimbra Collaboration Suite Critical Vulnerabilities Patched

Zimbra has released security patches addressing multiple high-severity vulnerabilities in its Collaboration Suite, including critical command injection (CVE-2023-37580), cross-site scripting (XSS), and server-side request forgery (SSRF) flaws. The command injection vulnerability specifically impacts servers with SNMP notifications enabled. While patches are available, the extent of active exploitation remains unconfirmed.

→ stable·2 signalsScore 8.0