We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the webmail calendar endpoints. This arises from improper handling of user-supplied input, allowing an attacker to inject malicious code that is reflected back in the HTML response.
Reserved 2024-10-27 | Published 2024-11-07 | Updated 2024-11-08 | Assigner mitrewiki.zimbra.com/wiki/Zimbra_Security_Advisories
wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46
Support options