Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities

Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network Management Protocol (SNMP) monitoring component. As many as nine security vulnerabilities have been patched in Zimbra 10.1.20. Topping the list is a command injection vulnerability in the SNMP monitoring component when SNMP notifications are enabled. Also patched

This headline and summary belong to the original publisher and are shown here with attribution for our readers; the complete article is available only at the source linked above. Curation and any commentary are by Addroit Nexus and do not imply endorsement by the publisher. Spotted an error or want a story removed? Tell us and we act quickly.