CVE-2024-45516

EPSS 0.41%
Veröffentlicht 14.05.2025 00:00:00
Zuletzt bearbeitet 11.06.2025 21:20:29
Erkennungen
Login

An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, including malformed <img> tags with embedded JavaScript. The vulnerability is triggered when a user views a specially crafted email in the Classic UI, requiring no additional user interaction.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 94 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Synacor ≫ Zimbra Collaboration Suite Version >= 10.0.0 < 10.0.12

Synacor ≫ Zimbra Collaboration Suite Version >= 10.1.0 < 10.1.4

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update -

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p1

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p10

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p11

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p12

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p13

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p14

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p15

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p16

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p17

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p18

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p19

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p2

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p20

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p21

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p22

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p23

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p24

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p25

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p26

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p27

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p28

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p29

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p3

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p30

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p31

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p31.1

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p32

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p33

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p34

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p35

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p36

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p37

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p38

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p39

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p4

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p40

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p41

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p42

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p43

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p44

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p45

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p46

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p5

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p6

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p7

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p8

Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p9

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update -

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p1

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p10

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p11

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p12

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p13

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p14

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p15

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p16

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p17

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p18

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p19

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p2

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p20

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p21

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p22

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p23

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p24

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p24.1

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p25

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p26

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p27

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p28

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p29

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p3

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p30

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p31

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p32

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p33

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p34

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p35

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p36

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p37

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p38

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p39

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p4

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p40

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p41

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p42

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p5

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p6

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p7

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p8

Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p9

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.41%	0.341

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

Vendor Advisory

https://wiki.zimbra.com/wiki/Security_Center

Vendor Advisory

https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

Product

https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.4#Security_Fixes

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2024-45516

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-45516

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-45516

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-45516