VULNERABILITY INTELLIGENCE

CVE-2023-43102

CVSS score6.1 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2023-12-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references