CVE-2023-43102

zimbra collaboration

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-43102

Katalog CVE

CVSS 6.1 · Medium EPSS 0,49%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada zimbra collaboration. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

Rincian

Terbit di NVD
7 Desember 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,49% peluang dieksploitasi; lebih tinggi dari 40,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zimbra collaboration Semua versi sebelum 8.8.15
zimbra collaboration Versi 10.0.0 hingga sebelum 10.0.4
zimbra collaboration Versi 8.8.15
zimbra collaboration Versi 8.8.15 p1
zimbra collaboration Versi 8.8.15 p10
zimbra collaboration Versi 8.8.15 p11
zimbra collaboration Versi 8.8.15 p12
zimbra collaboration Versi 8.8.15 p13
zimbra collaboration Versi 8.8.15 p14
zimbra collaboration Versi 8.8.15 p15
zimbra collaboration Versi 8.8.15 p16
zimbra collaboration Versi 8.8.15 p17
zimbra collaboration Versi 8.8.15 p18
zimbra collaboration Versi 8.8.15 p19
zimbra collaboration Versi 8.8.15 p2
zimbra collaboration Versi 8.8.15 p20
zimbra collaboration Versi 8.8.15 p21
zimbra collaboration Versi 8.8.15 p22
zimbra collaboration Versi 8.8.15 p23
zimbra collaboration Versi 8.8.15 p24
zimbra collaboration Versi 8.8.15 p25
zimbra collaboration Versi 8.8.15 p26
zimbra collaboration Versi 8.8.15 p27
zimbra collaboration Versi 8.8.15 p28
zimbra collaboration Versi 8.8.15 p29
zimbra collaboration Versi 8.8.15 p3
zimbra collaboration Versi 8.8.15 p30
zimbra collaboration Versi 8.8.15 p31
zimbra collaboration Versi 8.8.15 p32
zimbra collaboration Versi 8.8.15 p33
zimbra collaboration Versi 8.8.15 p34
zimbra collaboration Versi 8.8.15 p35
zimbra collaboration Versi 8.8.15 p37
zimbra collaboration Versi 8.8.15 p4
zimbra collaboration Versi 8.8.15 p40
zimbra collaboration Versi 8.8.15 p41
zimbra collaboration Versi 8.8.15 p42
zimbra collaboration Versi 8.8.15 p5
zimbra collaboration Versi 8.8.15 p6
zimbra collaboration Versi 8.8.15 p7
zimbra collaboration Versi 8.8.15 p8
zimbra collaboration Versi 8.8.15 p9
zimbra collaboration Versi 9.0.0
zimbra collaboration Versi 9.0.0 p0
zimbra collaboration Versi 9.0.0 p1
zimbra collaboration Versi 9.0.0 p10
zimbra collaboration Versi 9.0.0 p11
zimbra collaboration Versi 9.0.0 p12
zimbra collaboration Versi 9.0.0 p13
zimbra collaboration Versi 9.0.0 p14
zimbra collaboration Versi 9.0.0 p15
zimbra collaboration Versi 9.0.0 p16
zimbra collaboration Versi 9.0.0 p19
zimbra collaboration Versi 9.0.0 p2
zimbra collaboration Versi 9.0.0 p20
zimbra collaboration Versi 9.0.0 p21
zimbra collaboration Versi 9.0.0 p23
zimbra collaboration Versi 9.0.0 p24
zimbra collaboration Versi 9.0.0 p24.1
zimbra collaboration Versi 9.0.0 p25

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 73 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.