CVE-2013-5119: Synacor Zimbra Collaboration Suite

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token.

Affected products

• Synacor Zimbra Collaboration Suite: up to and including 6.0.16; version 6.0.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; …

Published 2013-09-23. Last modified 2026-06-16.