CVE-2018-10950

Name: CVE-2018-10950
Creator: NVD / NIST
Published: 2018-05-10T01:29:05.707+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.36%

Last modified Jun 17, 2026

CVE-2018-10950 is a vulnerability of currently unknown severity. mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.. EPSS estimates a 1.36% chance of exploitation in the next 30 days.

Description

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.

Metrics

EPSS Probability

1.36%

68.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Synacor	Zimbra Collaboration Suite	>= 8.7.0, < 8.7.11
Synacor	Zimbra Collaboration Suite	>= 8.8.0, < 8.8.8
Synacor	Zimbra Collaboration Suite	8.6.0
Synacor	Zimbra Collaboration Suite	8.7.11

References

https://bugzilla.zimbra.com/show_bug.cgi?id=108963Issue Tracking, Third Party Advisory
https://bugzilla.zimbra.com/show_bug.cgi?id=108963Issue Tracking, Third Party Advisory

Timeline

Published: May 10, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-10950?

How severe is CVE-2018-10950?

Severity scoring for CVE-2018-10950 is pending analysis. The EPSS model estimates a 1.36% probability of exploitation in the next 30 days.

How do I fix CVE-2018-10950?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-10950?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST