CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-07-06
Zimbra Collaboration Suite (ZCS) 8.8.15 Stored XSS Vulnerability Leading to Remote Code Execution (CVE-2023-34192) Security Advisory
[Affected Scope] Zimbra Collaboration Suite (ZCS) version 8.8.15
[Impact] A remote authenticated attacker can execute arbitrary code and hijack sessions by injecting malicious scripts into the '/h/autoSaveDraft' function
[Mitigation] Immediately apply the official Zimbra security patches and restrict access to the affected endpoint using WAF rules