Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-37580
HistoryJul 31, 2023 - 4:15 p.m.

CVE-2023-37580

2023-07-3116:15:10
CWE-79
[email protected]
web.nvd.nist.gov
6
cve-2023-37580
zimbra collaboration
zcs 8
xss

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.304

Percentile

97.0%

JSON

Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.

Affected configurations

Nvd
Node
zimbrazimbraRange8.8.0–8.8.15
OR
zimbrazimbraMatch8.8.15p11
OR
zimbrazimbraMatch8.8.15p26
OR
zimbrazimbraMatch8.8.15p3
OR
zimbrazimbraMatch8.8.15p30
OR
zimbrazimbraMatch8.8.15p31
OR
zimbrazimbraMatch8.8.15p32
OR
zimbrazimbraMatch8.8.15p33
OR
zimbrazimbraMatch8.8.15p34
OR
zimbrazimbraMatch8.8.15p35
OR
zimbrazimbraMatch8.8.15p37
OR
zimbrazimbraMatch8.8.15p38
OR
zimbrazimbraMatch8.8.15p40
OR
zimbrazimbraMatch8.8.15p5
VendorProductVersionCPE
zimbrazimbra*cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p11:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p26:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p3:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p30:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p31:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p32:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p33:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p34:*:*:*:*:*:*
zimbrazimbra8.8.15cpe:2.3:a:zimbra:zimbra:8.8.15:p35:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

cvelist 1
hivepro 2
thn 2
schneier 1
wallarmlab 1
prion 1
cisa_kev 1
cve 1
attackerkb 1
osv 1
nuclei 1
nessus 1
cvelist
cvelist
CVE-2023-37580
2023-07-31 00:00:00
hivepro
hivepro
Four Threat Actors Capitalized on Zimbra Zero Day to Infiltrate Government Organizations
2023-11-20 04:51:29
Zimbra Fixes A Zero-Day Vulnerability Exploited in Attacks
2023-07-31 05:57:58
thn
thn
Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups
2023-11-16 16:09:00
Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation
2023-07-14 07:05:00
schneier
schneier
Email Security Flaw Found in the Wild
2023-11-21 12:05:07
wallarmlab
wallarmlab
Unpacking the Zimbra Cross-Site Scripting Vulnerability (CVE-2023-37580)
2023-11-21 15:59:17
prion
prion
Cross site scripting
2023-07-31 16:15:00
cisa_kev
cisa_kev
Zimbra Collaboration (ZCS) Cross-Site Scripting (XSS) Vulnerability
2023-07-27 00:00:00
cve
cve
CVE-2023-37580
2023-07-31 16:15:10
attackerkb
attackerkb
CVE-2023-37580
2023-07-31 00:00:00
osv
osv
CVE-2023-37580
2023-07-31 16:15:10
nuclei
nuclei
Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting
2023-08-01 05:26:17
nessus
nessus
Zimbra Collaboration Server 8.x < 8.8.15 Patch 41 Multiple Vulnerabilities
2023-07-28 00:00:00

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.304

Percentile

97.0%

JSON
Related for NVD:CVE-2023-37580
cvelist1hivepro2thn2schneier1wallarmlab1prion1cisa_kev1cve1attackerkb1osv1nuclei1nessus1