CVE-2018-15131

5.3 mediumEPSS 1.9%

Medium (5.3) in synacor zimbra collaboration suite. EPSS 1.9% chance of exploitation in the next 30 days.

An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

synacor:zimbra_collaboration_suite

References

https://bugzilla.zimbra.com/show_bug.cgi?id=109012
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
https://bugzilla.zimbra.com/show_bug.cgi?id=109012

Check your stack JSON