6.1
CVE-2021-35207
- EPSS 1.06%
- Veröffentlicht 02.07.2021 19:15:08
- Zuletzt bearbeitet 21.11.2024 06:12:03
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the loginErrorCode parameter of the login url.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zimbra ≫ Collaboration Version >= 8.8 < 8.8.15
Zimbra ≫ Collaboration Version8.8.15 Update-
Zimbra ≫ Collaboration Version8.8.15 Updatep1
Zimbra ≫ Collaboration Version8.8.15 Updatep10
Zimbra ≫ Collaboration Version8.8.15 Updatep11
Zimbra ≫ Collaboration Version8.8.15 Updatep12
Zimbra ≫ Collaboration Version8.8.15 Updatep13
Zimbra ≫ Collaboration Version8.8.15 Updatep14
Zimbra ≫ Collaboration Version8.8.15 Updatep15
Zimbra ≫ Collaboration Version8.8.15 Updatep16
Zimbra ≫ Collaboration Version8.8.15 Updatep17
Zimbra ≫ Collaboration Version8.8.15 Updatep18
Zimbra ≫ Collaboration Version8.8.15 Updatep19
Zimbra ≫ Collaboration Version8.8.15 Updatep2
Zimbra ≫ Collaboration Version8.8.15 Updatep20
Zimbra ≫ Collaboration Version8.8.15 Updatep21
Zimbra ≫ Collaboration Version8.8.15 Updatep22
Zimbra ≫ Collaboration Version8.8.15 Updatep3
Zimbra ≫ Collaboration Version8.8.15 Updatep4
Zimbra ≫ Collaboration Version8.8.15 Updatep5
Zimbra ≫ Collaboration Version8.8.15 Updatep6
Zimbra ≫ Collaboration Version8.8.15 Updatep7
Zimbra ≫ Collaboration Version8.8.15 Updatep8
Zimbra ≫ Collaboration Version8.8.15 Updatep9
Zimbra ≫ Collaboration Version9.0.0 Update-
Zimbra ≫ Collaboration Version9.0.0 Updatep1
Zimbra ≫ Collaboration Version9.0.0 Updatep10
Zimbra ≫ Collaboration Version9.0.0 Updatep11
Zimbra ≫ Collaboration Version9.0.0 Updatep12
Zimbra ≫ Collaboration Version9.0.0 Updatep13
Zimbra ≫ Collaboration Version9.0.0 Updatep14
Zimbra ≫ Collaboration Version9.0.0 Updatep15
Zimbra ≫ Collaboration Version9.0.0 Updatep2
Zimbra ≫ Collaboration Version9.0.0 Updatep3
Zimbra ≫ Collaboration Version9.0.0 Updatep4
Zimbra ≫ Collaboration Version9.0.0 Updatep5
Zimbra ≫ Collaboration Version9.0.0 Updatep6
Zimbra ≫ Collaboration Version9.0.0 Updatep7
Zimbra ≫ Collaboration Version9.0.0 Updatep8
Zimbra ≫ Collaboration Version9.0.0 Updatep9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.06% | 0.77 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 2.8 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.