Unrated severityNVD Advisory· Published Feb 24, 2012· Updated Jun 16, 2026

CVE-2012-1213

Description

Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zimbra/Zimbra
cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*
Zimbra/Zimbra Collaboration (ZCS)llm-fuzzy
Range: 6.x before 6.0.15, 7.x before 7.1.3

Patches

Vulnerability mechanics

References

packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.htmlnvdExploit
st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.htmlnvdExploit
www.securityfocus.com/bid/51974nvdExploit
bugzilla.zimbra.com/show_bug.cginvd
exchange.xforce.ibmcloud.com/vulnerabilities/73168nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000