VULNERABILITY INTELLIGENCE

CVE-2023-24032

CVSS score7.8 HIGH
EPSS probability0.96%
CISA KEVNot currently listed
Published2023-06-15
Last modified2026-06-17

Description

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE).