CVE-2015-7610

Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2…

published May 30, 2018

CVSS
—
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.7th percentile
Published
2018-05-30T21:00Z
EPSS history
Timeline
  • 30 MAY 21:00Z
    Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2…
    cvelistv5