Unrated severityNVD Advisory· Published Feb 24, 2012· Updated Apr 29, 2026

CVE-2012-1213

Description

Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter.

Affected products

Zimbra/Zimbra
cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.htmlnvdExploit
st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.htmlnvdExploit
www.securityfocus.com/bid/51974nvdExploit
bugzilla.zimbra.com/show_bug.cginvd
exchange.xforce.ibmcloud.com/vulnerabilities/73168nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000