CVE-2019-12427

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2020-01-27

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Collaboration Server (Zimbra)

References

• https://bugzilla.zimbra.com/show_bug.cgi?id=109174
• https://wiki.zimbra.com/wiki/Security_Center
• https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories