An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15
published June 15, 2023
CVSS
—
EPSS
0%
Percentile
33.2
In the wild
Unconfirmed
What it is
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00401 · 33.2th percentile
Published
2023-06-15T00:00Z
EPSS history
Timeline
15 JUN 00:00Z
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15