In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zimbra | Zimbra | 8.8.0 (including) | 8.8.15 (excluding) |
| Zimbra | Zimbra | 8.8.15-p11 (including) | 8.8.15-p11 (including) |
| Zimbra | Zimbra | 8.8.15-p26 (including) | 8.8.15-p26 (including) |
| Zimbra | Zimbra | 8.8.15-p3 (including) | 8.8.15-p3 (including) |
| Zimbra | Zimbra | 8.8.15-p30 (including) | 8.8.15-p30 (including) |
| Zimbra | Zimbra | 8.8.15-p31 (including) | 8.8.15-p31 (including) |
| Zimbra | Zimbra | 8.8.15-p32 (including) | 8.8.15-p32 (including) |
| Zimbra | Zimbra | 8.8.15-p33 (including) | 8.8.15-p33 (including) |
| Zimbra | Zimbra | 8.8.15-p34 (including) | 8.8.15-p34 (including) |
| Zimbra | Zimbra | 8.8.15-p35 (including) | 8.8.15-p35 (including) |
| Zimbra | Zimbra | 8.8.15-p37 (including) | 8.8.15-p37 (including) |
| Zimbra | Zimbra | 8.8.15-p38 (including) | 8.8.15-p38 (including) |
| Zimbra | Zimbra | 8.8.15-p40 (including) | 8.8.15-p40 (including) |
| Zimbra | Zimbra | 8.8.15-p5 (including) | 8.8.15-p5 (including) |
| Zimbra | Zimbra | 9.0.0 (including) | 9.0.0 (including) |
| Zimbra | Zimbra | 9.0.0-p0 (including) | 9.0.0-p0 (including) |
| Zimbra | Zimbra | 9.0.0-p19 (including) | 9.0.0-p19 (including) |
| Zimbra | Zimbra | 9.0.0-p23 (including) | 9.0.0-p23 (including) |
| Zimbra | Zimbra | 9.0.0-p25 (including) | 9.0.0-p25 (including) |
| Zimbra | Zimbra | 9.0.0-p26 (including) | 9.0.0-p26 (including) |
| Zimbra | Zimbra | 9.0.0-p27 (including) | 9.0.0-p27 (including) |
| Zimbra | Zimbra | 9.0.0-p28 (including) | 9.0.0-p28 (including) |
| Zimbra | Zimbra | 9.0.0-p30 (including) | 9.0.0-p30 (including) |
| Zimbra | Zimbra | 9.0.0-p31 (including) | 9.0.0-p31 (including) |
| Zimbra | Zimbra | 9.0.0-p33 (including) | 9.0.0-p33 (including) |
| Zimbra | Zimbra | 9.0.0-p4 (including) | 9.0.0-p4 (including) |
| Zimbra | Zimbra | 9.0.0-p7 (including) | 9.0.0-p7 (including) |
| Zimbra | Zimbra | 9.0.0-p7.1 (including) | 9.0.0-p7.1 (including) |
| Zimbra | Zimbra | 10.0.1 (including) | 10.0.1 (including) |