VYPR

Collaboration

by Zimbra

CVEs (41)

  • CVE-2023-45207MedFeb 13, 2024
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through mail that contains malicious JavaScript. While previewing this file in webmail in the Chrome browser, the stored XSS payload is executed. (This has been…

  • CVE-2023-45206MedFeb 13, 2024
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webmail, an attacker can inject JavaScript or HTML code that leads to cross-site scripting (XSS). (Adding an adequate message to avoid malicious code will mitigate…

  • CVE-2023-43103MedDec 7, 2023
    risk 0.40cvss 6.1epss 0.00

    An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

  • CVE-2023-43102MedDec 7, 2023
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

  • CVE-2023-24031MedJun 15, 2023
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.

  • CVE-2023-24030MedJun 15, 2023
    risk 0.40cvss 6.1epss 0.00

    An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15. To exploit the vulnerability, an attacker would need to have obtained a valid zimbra auth token or a valid preauth token. Once the token is obtained, an attacker…

  • CVE-2022-45913MedJan 6, 2023
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure.

  • CVE-2022-45911MedJan 6, 2023
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbitrary JavaScript code in the username field. This occurs before the user logs into the system, which means that even if the attacker executes arbitrary…

  • CVE-2022-41351MedOct 12, 2022
    risk 0.40cvss 6.1epss 0.00

    In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string (instead of default value of 10).

  • CVE-2022-41350MedOct 12, 2022
    risk 0.40cvss 6.1epss 0.00

    In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a phone parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.

  • CVE-2022-41349MedOct 12, 2022
    risk 0.40cvss 6.1epss 0.00

    In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.

  • CVE-2022-41348MedOct 12, 2022
    risk 0.40cvss 6.1epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror attribute of an IMG element, leading to information disclosure.

  • CVE-2022-37044MedAug 12, 2022
    risk 0.40cvss 6.1epss 0.01

    In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partially sanitised and lead to reflected XSS that allows executing arbitrary JavaScript on the victim's machine.

  • CVE-2021-35207MedJul 2, 2021
    risk 0.40cvss 6.1epss 0.03

    An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the…

  • CVE-2021-34807MedJul 2, 2021
    risk 0.40cvss 6.1epss 0.01

    An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0. To exploit the vulnerability, an attacker would need to have obtained a valid zimbra auth token or a valid preauth token. Once the token is obtained, an attacker could…

  • CVE-2022-37043MedAug 12, 2022
    risk 0.37cvss 5.7epss 0.00

    An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the…

  • CVE-2025-27914MedMar 12, 2025
    risk 0.35cvss 5.4epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /h/rest endpoint, allowing authenticated attackers to inject and execute arbitrary JavaScript in a victim's session. Exploitation…

  • CVE-2024-33536MedAug 12, 2024
    risk 0.35cvss 5.4epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser…

  • CVE-2024-33533MedAug 12, 2024
    risk 0.35cvss 5.4epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting (XSS) vulnerability has been identified in the Zimbra webmail admin interface. This vulnerability occurs due to inadequate input validation of the packages…

  • CVE-2021-35208MedJul 2, 2021
    risk 0.35cvss 5.4epss 0.01

    An issue was discovered in ZmMailMsgView.js in the Calendar Invite component in Zimbra Collaboration Suite 8.8.x before 8.8.15 Patch 23. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary…