Zimbra : Security Vulnerabilities, CVEs, (Information Leak)
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.
Max CVSS
6.1
EPSS Score
0.05%
Published
2023-06-15
Updated
2023-06-27
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure.
Max CVSS
6.1
EPSS Score
0.07%
Published
2023-01-06
Updated
2023-01-12
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror attribute of an IMG element, leading to information disclosure.
Max CVSS
6.1
EPSS Score
0.08%
Published
2022-10-12
Updated
2022-10-13
3 vulnerabilities found