Medium severity6.5NVD Advisory· Published Dec 17, 2020· Updated Jun 17, 2026
CVE-2020-35123
CVE-2020-35123
Description
In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29cpe:2.3:a:zimbra:collaboration:*:*:*:*:*:*:*:*+ 27 more
- cpe:2.3:a:zimbra:collaboration:*:*:*:*:*:*:*:*range: >8.8.0,<8.8.15
- cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p10:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p12:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p13:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p14:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p15:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p16:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p2:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p3:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p4:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p5:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p6:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p7:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p8:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:8.8.15:p9:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p2:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p3:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p5:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p6:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p8:*:*:*:*:*:*
- cpe:2.3:a:zimbra:collaboration:9.0.0:p9:*:*:*:*:*:*
- Range: <9.0.0 P10 and 8.8.15 P17
Patches
Vulnerability mechanics
References
4- wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P17nvdRelease NotesVendor Advisory
- wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P10nvdThird Party AdvisoryVendor Advisory
- wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesnvdVendor Advisory
- wiki.zimbra.com/wiki/Security_CenternvdProduct
News mentions
0No linked articles in our index yet.