Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Mô tả

Tham khảo

• seclists.org/fulldisclosure/2018/Mar/52 · Mailing List
• securityfocus.com/archive/1/541891/100/0/threaded · Broken Link
• bugzilla.zimbra.com/show_bug.cgi · Broken Link
• wiki.zimbra.com/wiki/Zimbra_Releases/8.8.7 · Permissions Required
• wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory
• securify.nl/advisory/SFY20180101/cross-site-scripting-vulnerability-in-zimbra-collaboration-suite-due-to-the-way-it-handles-attachment-links.html · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2018-6882

Lỗ hổng khác của zimbra collaboration suite

• CVE-2026-93638TRUNG BÌNH 6.1A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthenticated attacker to e…
• CVE-2026-93636TRUNG BÌNH 4.3An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwise unreturned attrib…
• CVE-2026-93634TRUNG BÌNH 4.3A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file re…
• CVE-2026-93633TRUNG BÌNH 5.4A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a documen…
• CVE-2026-93631CAO 7.1A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to …