CVE-2023-43102

EPSS 0.43%
Veröffentlicht 07.12.2023 06:15:54
Zuletzt bearbeitet 21.11.2024 08:23:42
Erkennungen
Login

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 73 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zimbra ≫ Collaboration Version < 8.8.15

Zimbra ≫ Collaboration Version >= 10.0.0 < 10.0.4

Zimbra ≫ Collaboration Version 8.8.15 Update -

Zimbra ≫ Collaboration Version 8.8.15 Update p1

Zimbra ≫ Collaboration Version 8.8.15 Update p10

Zimbra ≫ Collaboration Version 8.8.15 Update p11

Zimbra ≫ Collaboration Version 8.8.15 Update p12

Zimbra ≫ Collaboration Version 8.8.15 Update p13

Zimbra ≫ Collaboration Version 8.8.15 Update p14

Zimbra ≫ Collaboration Version 8.8.15 Update p15

Zimbra ≫ Collaboration Version 8.8.15 Update p16

Zimbra ≫ Collaboration Version 8.8.15 Update p17

Zimbra ≫ Collaboration Version 8.8.15 Update p18

Zimbra ≫ Collaboration Version 8.8.15 Update p19

Zimbra ≫ Collaboration Version 8.8.15 Update p2

Zimbra ≫ Collaboration Version 8.8.15 Update p20

Zimbra ≫ Collaboration Version 8.8.15 Update p21

Zimbra ≫ Collaboration Version 8.8.15 Update p22

Zimbra ≫ Collaboration Version 8.8.15 Update p23

Zimbra ≫ Collaboration Version 8.8.15 Update p24

Zimbra ≫ Collaboration Version 8.8.15 Update p25

Zimbra ≫ Collaboration Version 8.8.15 Update p26

Zimbra ≫ Collaboration Version 8.8.15 Update p27

Zimbra ≫ Collaboration Version 8.8.15 Update p28

Zimbra ≫ Collaboration Version 8.8.15 Update p29

Zimbra ≫ Collaboration Version 8.8.15 Update p3

Zimbra ≫ Collaboration Version 8.8.15 Update p30

Zimbra ≫ Collaboration Version 8.8.15 Update p31

Zimbra ≫ Collaboration Version 8.8.15 Update p32

Zimbra ≫ Collaboration Version 8.8.15 Update p33

Zimbra ≫ Collaboration Version 8.8.15 Update p34

Zimbra ≫ Collaboration Version 8.8.15 Update p35

Zimbra ≫ Collaboration Version 8.8.15 Update p37

Zimbra ≫ Collaboration Version 8.8.15 Update p4

Zimbra ≫ Collaboration Version 8.8.15 Update p40

Zimbra ≫ Collaboration Version 8.8.15 Update p41

Zimbra ≫ Collaboration Version 8.8.15 Update p42

Zimbra ≫ Collaboration Version 8.8.15 Update p5

Zimbra ≫ Collaboration Version 8.8.15 Update p6

Zimbra ≫ Collaboration Version 8.8.15 Update p7

Zimbra ≫ Collaboration Version 8.8.15 Update p8

Zimbra ≫ Collaboration Version 8.8.15 Update p9

Zimbra ≫ Collaboration Version 9.0.0 Update -

Zimbra ≫ Collaboration Version 9.0.0 Update p0

Zimbra ≫ Collaboration Version 9.0.0 Update p1

Zimbra ≫ Collaboration Version 9.0.0 Update p10

Zimbra ≫ Collaboration Version 9.0.0 Update p11

Zimbra ≫ Collaboration Version 9.0.0 Update p12

Zimbra ≫ Collaboration Version 9.0.0 Update p13

Zimbra ≫ Collaboration Version 9.0.0 Update p14

Zimbra ≫ Collaboration Version 9.0.0 Update p15

Zimbra ≫ Collaboration Version 9.0.0 Update p16

Zimbra ≫ Collaboration Version 9.0.0 Update p19

Zimbra ≫ Collaboration Version 9.0.0 Update p2

Zimbra ≫ Collaboration Version 9.0.0 Update p20

Zimbra ≫ Collaboration Version 9.0.0 Update p21

Zimbra ≫ Collaboration Version 9.0.0 Update p23

Zimbra ≫ Collaboration Version 9.0.0 Update p24

Zimbra ≫ Collaboration Version 9.0.0 Update p24.1

Zimbra ≫ Collaboration Version 9.0.0 Update p25

Zimbra ≫ Collaboration Version 9.0.0 Update p26

Zimbra ≫ Collaboration Version 9.0.0 Update p27

Zimbra ≫ Collaboration Version 9.0.0 Update p3

Zimbra ≫ Collaboration Version 9.0.0 Update p33

Zimbra ≫ Collaboration Version 9.0.0 Update p34

Zimbra ≫ Collaboration Version 9.0.0 Update p35

Zimbra ≫ Collaboration Version 9.0.0 Update p4

Zimbra ≫ Collaboration Version 9.0.0 Update p5

Zimbra ≫ Collaboration Version 9.0.0 Update p6

Zimbra ≫ Collaboration Version 9.0.0 Update p7

Zimbra ≫ Collaboration Version 9.0.0 Update p7.1

Zimbra ≫ Collaboration Version 9.0.0 Update p8

Zimbra ≫ Collaboration Version 9.0.0 Update p9

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.343

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

Vendor Advisory

https://wiki.zimbra.com/wiki/Security_Center

Patch

https://nvd.nist.gov/vuln/detail/CVE-2023-43102

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-43102

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-43102

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-43102