6.1

CVE-2023-45206

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webmail, an attacker can inject JavaScript or HTML code that leads to cross-site scripting (XSS). (Adding an adequate message to avoid malicious code will mitigate this issue.)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zimbra ≫ Collaboration Version >= 10.0.0 < 10.0.5
Zimbra ≫ Collaboration Version 8.8.15 Update -
Zimbra ≫ Collaboration Version 8.8.15 Update p1
Zimbra ≫ Collaboration Version 8.8.15 Update p10
Zimbra ≫ Collaboration Version 8.8.15 Update p11
Zimbra ≫ Collaboration Version 8.8.15 Update p12
Zimbra ≫ Collaboration Version 8.8.15 Update p13
Zimbra ≫ Collaboration Version 8.8.15 Update p14
Zimbra ≫ Collaboration Version 8.8.15 Update p15
Zimbra ≫ Collaboration Version 8.8.15 Update p16
Zimbra ≫ Collaboration Version 8.8.15 Update p17
Zimbra ≫ Collaboration Version 8.8.15 Update p18
Zimbra ≫ Collaboration Version 8.8.15 Update p19
Zimbra ≫ Collaboration Version 8.8.15 Update p2
Zimbra ≫ Collaboration Version 8.8.15 Update p20
Zimbra ≫ Collaboration Version 8.8.15 Update p21
Zimbra ≫ Collaboration Version 8.8.15 Update p22
Zimbra ≫ Collaboration Version 8.8.15 Update p23
Zimbra ≫ Collaboration Version 8.8.15 Update p24
Zimbra ≫ Collaboration Version 8.8.15 Update p25
Zimbra ≫ Collaboration Version 8.8.15 Update p26
Zimbra ≫ Collaboration Version 8.8.15 Update p27
Zimbra ≫ Collaboration Version 8.8.15 Update p28
Zimbra ≫ Collaboration Version 8.8.15 Update p29
Zimbra ≫ Collaboration Version 8.8.15 Update p3
Zimbra ≫ Collaboration Version 8.8.15 Update p30
Zimbra ≫ Collaboration Version 8.8.15 Update p31
Zimbra ≫ Collaboration Version 8.8.15 Update p32
Zimbra ≫ Collaboration Version 8.8.15 Update p33
Zimbra ≫ Collaboration Version 8.8.15 Update p34
Zimbra ≫ Collaboration Version 8.8.15 Update p35
Zimbra ≫ Collaboration Version 8.8.15 Update p37
Zimbra ≫ Collaboration Version 8.8.15 Update p38
Zimbra ≫ Collaboration Version 8.8.15 Update p39
Zimbra ≫ Collaboration Version 8.8.15 Update p4
Zimbra ≫ Collaboration Version 8.8.15 Update p40
Zimbra ≫ Collaboration Version 8.8.15 Update p41
Zimbra ≫ Collaboration Version 8.8.15 Update p42
Zimbra ≫ Collaboration Version 8.8.15 Update p43
Zimbra ≫ Collaboration Version 8.8.15 Update p5
Zimbra ≫ Collaboration Version 8.8.15 Update p6
Zimbra ≫ Collaboration Version 8.8.15 Update p7
Zimbra ≫ Collaboration Version 8.8.15 Update p8
Zimbra ≫ Collaboration Version 8.8.15 Update p9
Zimbra ≫ Collaboration Version 9.0.0 Update -
Zimbra ≫ Collaboration Version 9.0.0 Update p0
Zimbra ≫ Collaboration Version 9.0.0 Update p1
Zimbra ≫ Collaboration Version 9.0.0 Update p10
Zimbra ≫ Collaboration Version 9.0.0 Update p11
Zimbra ≫ Collaboration Version 9.0.0 Update p12
Zimbra ≫ Collaboration Version 9.0.0 Update p13
Zimbra ≫ Collaboration Version 9.0.0 Update p14
Zimbra ≫ Collaboration Version 9.0.0 Update p15
Zimbra ≫ Collaboration Version 9.0.0 Update p16
Zimbra ≫ Collaboration Version 9.0.0 Update p19
Zimbra ≫ Collaboration Version 9.0.0 Update p2
Zimbra ≫ Collaboration Version 9.0.0 Update p20
Zimbra ≫ Collaboration Version 9.0.0 Update p21
Zimbra ≫ Collaboration Version 9.0.0 Update p23
Zimbra ≫ Collaboration Version 9.0.0 Update p24
Zimbra ≫ Collaboration Version 9.0.0 Update p24.1
Zimbra ≫ Collaboration Version 9.0.0 Update p25
Zimbra ≫ Collaboration Version 9.0.0 Update p26
Zimbra ≫ Collaboration Version 9.0.0 Update p27
Zimbra ≫ Collaboration Version 9.0.0 Update p3
Zimbra ≫ Collaboration Version 9.0.0 Update p30
Zimbra ≫ Collaboration Version 9.0.0 Update p31
Zimbra ≫ Collaboration Version 9.0.0 Update p32
Zimbra ≫ Collaboration Version 9.0.0 Update p33
Zimbra ≫ Collaboration Version 9.0.0 Update p34
Zimbra ≫ Collaboration Version 9.0.0 Update p35
Zimbra ≫ Collaboration Version 9.0.0 Update p36
Zimbra ≫ Collaboration Version 9.0.0 Update p4
Zimbra ≫ Collaboration Version 9.0.0 Update p5
Zimbra ≫ Collaboration Version 9.0.0 Update p6
Zimbra ≫ Collaboration Version 9.0.0 Update p7
Zimbra ≫ Collaboration Version 9.0.0 Update p7.1
Zimbra ≫ Collaboration Version 9.0.0 Update p8
Zimbra ≫ Collaboration Version 9.0.0 Update p9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.326
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA-ADP 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
Vendor Advisory
https://wiki.zimbra.com/wiki/Security_Center
Vendor Advisory
Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
Product