Zimbra CWS / v8-10 JSP/XML Exposure (before 8.8.15p41/9.0.0p34/10.0.2)
CVE-2023-38750 Published on July 31, 2023
In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
Products Associated with CVE-2023-38750
stack.watch emails you whenever new vulnerabilities are published in Zimbra or Zimbra Collaboration Suite. Just hit a watch button to start following.
Exploit Probability
EPSS
0.30%
Percentile
52.51%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.