CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-02-09
Zimbra Collaboration Suite (ZCS) Calendar Cross-Site Scripting (XSS) Vulnerability (CVE-2022-24682) Analysis and Mitigation Guide
[Affected Scope] Zimbra Collaboration Suite (ZCS) 8.8.x versions prior to 8.8.15 Patch 30 (Update 1)
[Impact] Attackers can execute arbitrary JavaScript in the victim's browser session, leading to session hijacking and unauthorized mailbox access
[Mitigation] Immediately upgrade Zimbra Collaboration Suite to 8.8.15 Patch 30 (Update 1) or later