Cross-Site Scripting Vulnerability in Zimbra Collaboration Suite
CVE-2012-1213

Currently unrated

Key Information:

Vendor

Zimbra

Status
Zimbra
Vendor
CVE Published:
24 February 2012

What is CVE-2012-1213?

A cross-site scripting (XSS) vulnerability exists in the Zimbra Web Client within the Zimbra Collaboration Suite, allowing remote attackers to execute arbitrary web scripts or HTML through the manipulation of the 'view' parameter. This flaw potentially enables attackers to hijack user sessions, redirect users to malicious sites, or access sensitive information. It is crucial for users of affected versions to apply security patches or employ appropriate mitigation strategies.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/73168
vdb-entryx_refsource_XF
http://packetstormsecurity.org/files/109710/Zimbra-Cross-...
x_refsource_MISC
http://www.securityfocus.com/bid/51974
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.