Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the loginErrorCode parameter of the login url.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zimbra Collaboration Suite跨站脚本漏洞
Vulnerability Description
Zimbra Collaboration Suite（ZCS）是美国Synacor的一款开源协同办公套件。该产品包括WebMail、日历、通信录等。 Zimbra Collaboration Suite 中存在跨站脚本漏洞，该漏洞源于在登陆过程中的oginErrorCode参数未能验证用户输入数据，攻击者可通过该漏洞执行远程客户端代码。以下产品及版本受到影响：Zimbra Collaboration Suite 8.8 至 8.8.15 Patch 23 版本， Zimbra Collaboration
CVSS Information
N/A
Vulnerability Type
N/A