CVE-2020-18984

2021-12-1523:15:08

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

JSON

A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scripts or HTML via a host header injection.

CPENameOperatorVersion
zm-buildeq8.8.7
zm-buildeq8.7.7
zm-buildeq8.8.10
zm-buildeq8.8.11
zm-buildeq8.8.3
zm-buildeq8.7.10
zm-buildeq8.8.0.beta1
zm-buildeq8.8.9
zm-buildeq8.8.0beta2
zm-buildeq8.7.9

Name	Operator	Version
zm-build	eq	8.8.7
zm-build	eq	8.7.7
zm-build	eq	8.8.10
zm-build	eq	8.8.11
zm-build	eq	8.8.3
zm-build	eq	8.7.10
zm-build	eq	8.8.0.beta1
zm-build	eq	8.8.9
zm-build	eq	8.8.0beta2
zm-build	eq	8.7.9

Rows per page:

1-10 of 211

References

github.com/buxu/bug/issues/2