CVE-2023-50808

zimbra collaboration

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-50808

Katalog CVE

CVSS 6.1 · Medium EPSS 0,44%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada zimbra collaboration. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.

Rincian

Terbit di NVD
13 Februari 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-94: Improper Control of Generation of Code ('Code Injection')
EPSS (30 hari)
0,44% peluang dieksploitasi; lebih tinggi dari 36,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zimbra collaboration Semua versi sebelum 9.0.0
zimbra collaboration Versi 9.0.0
zimbra collaboration Versi 9.0.0 p0
zimbra collaboration Versi 9.0.0 p1
zimbra collaboration Versi 9.0.0 p10
zimbra collaboration Versi 9.0.0 p11
zimbra collaboration Versi 9.0.0 p12
zimbra collaboration Versi 9.0.0 p13
zimbra collaboration Versi 9.0.0 p14
zimbra collaboration Versi 9.0.0 p15
zimbra collaboration Versi 9.0.0 p16
zimbra collaboration Versi 9.0.0 p19
zimbra collaboration Versi 9.0.0 p2
zimbra collaboration Versi 9.0.0 p20
zimbra collaboration Versi 9.0.0 p21
zimbra collaboration Versi 9.0.0 p23
zimbra collaboration Versi 9.0.0 p24
zimbra collaboration Versi 9.0.0 p24.1
zimbra collaboration Versi 9.0.0 p25
zimbra collaboration Versi 9.0.0 p26
zimbra collaboration Versi 9.0.0 p27
zimbra collaboration Versi 9.0.0 p3
zimbra collaboration Versi 9.0.0 p30
zimbra collaboration Versi 9.0.0 p31
zimbra collaboration Versi 9.0.0 p32
zimbra collaboration Versi 9.0.0 p33
zimbra collaboration Versi 9.0.0 p34
zimbra collaboration Versi 9.0.0 p35
zimbra collaboration Versi 9.0.0 p36
zimbra collaboration Versi 9.0.0 p37
zimbra collaboration Versi 9.0.0 p38
zimbra collaboration Versi 9.0.0 p4
zimbra collaboration Versi 9.0.0 p5
zimbra collaboration Versi 9.0.0 p6
zimbra collaboration Versi 9.0.0 p7
zimbra collaboration Versi 9.0.0 p7.1
zimbra collaboration Versi 9.0.0 p8
zimbra collaboration Versi 9.0.0 p9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.