CVEvulnerability
CVE-2020-35123
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-12-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-611
Description
In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17.
Affected configurations
• zimbra collaboration (> 8.8.0 < 8.8.15)
• zimbra collaboration 8.8.15
• zimbra collaboration 9.0.0
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- https://wiki.zimbra.com/wiki/Security_Center Product
- https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P17 Release Notes, Vendor Advisory
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P10 Third Party Advisory, Vendor Advisory
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Vendor Advisory
- https://wiki.zimbra.com/wiki/Security_Center Product
- https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P17 Release Notes, Vendor Advisory
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P10 Third Party Advisory, Vendor Advisory
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Vendor Advisory