Medium severity5.4NVD Advisory· Published Jan 16, 2018· Updated Jun 17, 2026
CVE-2017-8802
CVE-2017-8802
Description
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:synocor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:synocor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*range: <=8.7.11
- cpe:2.3:a:synocor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesnvdPatchVendor Advisory
- www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-001_zimbra_stored_xss.txtnvdThird Party Advisory
- bugzilla.zimbra.com/show_bug.cginvdPermissions Required
- www.securityfocus.com/archive/1/541661/100/0/threadednvd
News mentions
0No linked articles in our index yet.