CVE-2019-6980

Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.

• CWE-502

• https://bugzilla.zimbra.com/show_bug.cgi?id=109097Issue Tracking, Third Party Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
• https://bugzilla.zimbra.com/show_bug.cgi?id=109097Issue Tracking, Third Party Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory

Published

May 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6974In the Linux kernel before 4.20.8, kvm_ioctl_create_device i…8.1
• CVE-2019-6975Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x…
• CVE-2019-6976libvips before 8.7.4 generates output images from uninitiali…
• CVE-2019-6977gdImageColorMatch in gd_color_match.c in the GD Graphics Lib…
• CVE-2019-6978The GD Graphics Library (aka LibGD) 2.2.5 has a double free …
• CVE-2019-6979An issue was discovered in the User IP History Logs (aka IP_…
• CVE-2019-6981Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind…
• CVE-2019-6982An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6983An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6984An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6985An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6986SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attac…