CVE-2020-13653

An XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15 Patch 11

published July 2, 2020

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

An XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15 Patch 11. It allows an attacker to inject executable JavaScript into the account name of a user's profile. The injected code can be reflected and executed when changing an e-mail signature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01398 · 72.2th percentile
Published
2020-07-02T15:15Z
EPSS history
Timeline
  • 02 JUL 15:15Z
    An XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15 Patch 11
    cvelistv5