CVE-2016-3406

Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of…

published January 18, 2017

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader extension or (2) extension REST handlers, aka bugs 104294 and 104456.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.2th percentile
Published
2017-01-18T22:00Z
EPSS history
Timeline
  • 18 JAN 22:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of…
    cvelistv5