ZCS <10.0.4 XSS allows authenticated mailbox access
CVE-2023-43102 Published on December 7, 2023
An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.
Products Associated with CVE-2023-43102
Want to know whenever a new CVE is published for Zimbra Collaboration? stack.watch will email you.
Exploit Probability
EPSS
0.50%
Percentile
65.32%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.