XSS via unsanitized param in Zimbra ZCS before 10.0.4 (8.8.15/9.0.0 fixes)
CVE-2023-43103 Published on December 7, 2023
An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.
Products Associated with CVE-2023-43103
Want to know whenever a new CVE is published for Zimbra Collaboration? stack.watch will email you.
Exploit Probability
EPSS
0.43%
Percentile
62.20%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.