CVE:CVE-2019-6980
CNNVD:CNNVD-201905-1060
Zimbra Collaboration Suite（ZCS）是美国Zimbra公司的一款开源协同办公套件。该产品包括WebMail、日历、通信录等。
Zimbra ZCS 8.7.x版本至8.8.11版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade synacor zimbra_collaboration_suite to a higher version than 8.7.11,8.8.9,8.7.11,8.7.11:p1,8.7.11:p2,8.7.11:p3,8.7.11:p4,8.7.11:p5,8.7.11:p6,8.7.11:p7,8.7.11:p8,8.8.9,8.8.9:p1,8.8.9:p2,8.8.9:p3,8.8.9:p4,8.8.9:p6,8.8.9:p7,8.8.9:p8,8.8.10,8.8.10:p2,8.8.10:p3,8.8.10:p4,8.8.10:p6,8.8.11,8.8.11:p2,and avoid the version [8.7.0,8.7.11),[8.8.0,8.8.9),8.7.11,8.7.11:p1,8.7.11:p2,8.7.11:p3,8.7.11:p4,8.7.11:p5,8.7.11:p6,8.7.11:p7,8.7.11:p8,8.8.9,8.8.9:p1,8.8.9:p2,8.8.9:p3,8.8.9:p4,8.8.9:p6,8.8.9:p7,8.8.9:p8,8.8.10,8.8.10:p2,8.8.10:p3,8.8.10:p4,8.8.10:p6,8.8.11,8.8.11:p2
solution:Upgrade openbsd openssh to a higher version than 7.9,and avoid the version (,7.9]; Upgrade winscp winscp to a higher version than 5.13,and avoid the version (,5.13]; Upgrade netapp element_software to a higher version than -; Upgrade netapp ontap_select_deploy to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade siemens scalance_x204rna_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7); Upgrade siemens scalance_x204rna_eec_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7)