CVE-2023-41106: zimbra collaboration

csirt@kutim:~/threat-intel/cve/CVE-2023-41106

CVSS 7.5 · High EPSS 1,0%

Kerentanan pada zimbra collaboration. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42.

Rincian

Terbit di NVD: 7 Desember 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
EPSS (30 hari): 1,0% peluang dieksploitasi; lebih tinggi dari 63,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
zimbra	collaboration	Semua versi sebelum 8.8.15
zimbra	collaboration	Versi 10.0.0 hingga sebelum 10.0.3
zimbra	collaboration	Versi 8.8.15
zimbra	collaboration	Versi 8.8.15 p1
zimbra	collaboration	Versi 8.8.15 p10
zimbra	collaboration	Versi 8.8.15 p11
zimbra	collaboration	Versi 8.8.15 p12
zimbra	collaboration	Versi 8.8.15 p13
zimbra	collaboration	Versi 8.8.15 p14
zimbra	collaboration	Versi 8.8.15 p15
zimbra	collaboration	Versi 8.8.15 p16
zimbra	collaboration	Versi 8.8.15 p17
zimbra	collaboration	Versi 8.8.15 p18
zimbra	collaboration	Versi 8.8.15 p19
zimbra	collaboration	Versi 8.8.15 p2
zimbra	collaboration	Versi 8.8.15 p20
zimbra	collaboration	Versi 8.8.15 p21
zimbra	collaboration	Versi 8.8.15 p22
zimbra	collaboration	Versi 8.8.15 p23
zimbra	collaboration	Versi 8.8.15 p24
zimbra	collaboration	Versi 8.8.15 p25
zimbra	collaboration	Versi 8.8.15 p26
zimbra	collaboration	Versi 8.8.15 p27
zimbra	collaboration	Versi 8.8.15 p28
zimbra	collaboration	Versi 8.8.15 p29
zimbra	collaboration	Versi 8.8.15 p3
zimbra	collaboration	Versi 8.8.15 p30
zimbra	collaboration	Versi 8.8.15 p31
zimbra	collaboration	Versi 8.8.15 p32
zimbra	collaboration	Versi 8.8.15 p33
zimbra	collaboration	Versi 8.8.15 p34
zimbra	collaboration	Versi 8.8.15 p35
zimbra	collaboration	Versi 8.8.15 p37
zimbra	collaboration	Versi 8.8.15 p4
zimbra	collaboration	Versi 8.8.15 p40
zimbra	collaboration	Versi 8.8.15 p41
zimbra	collaboration	Versi 8.8.15 p5
zimbra	collaboration	Versi 8.8.15 p6
zimbra	collaboration	Versi 8.8.15 p7
zimbra	collaboration	Versi 8.8.15 p8
zimbra	collaboration	Versi 8.8.15 p9
zimbra	collaboration	Versi 9.0.0
zimbra	collaboration	Versi 9.0.0 p0
zimbra	collaboration	Versi 9.0.0 p1
zimbra	collaboration	Versi 9.0.0 p10
zimbra	collaboration	Versi 9.0.0 p11
zimbra	collaboration	Versi 9.0.0 p12
zimbra	collaboration	Versi 9.0.0 p13
zimbra	collaboration	Versi 9.0.0 p14
zimbra	collaboration	Versi 9.0.0 p15
zimbra	collaboration	Versi 9.0.0 p16
zimbra	collaboration	Versi 9.0.0 p19
zimbra	collaboration	Versi 9.0.0 p2
zimbra	collaboration	Versi 9.0.0 p20
zimbra	collaboration	Versi 9.0.0 p21
zimbra	collaboration	Versi 9.0.0 p23
zimbra	collaboration	Versi 9.0.0 p24
zimbra	collaboration	Versi 9.0.0 p24.1
zimbra	collaboration	Versi 9.0.0 p25
zimbra	collaboration	Versi 9.0.0 p26

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 71 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories advisory vendor
http://www.openwall.com/lists/oss-security/2023/11/17/2 mailing list · advisory pihak ketiga
https://wiki.zimbra.com/wiki/Security_Center release notes

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.