Cross-Site Scripting Vulnerabilities in Zimbra Collaboration by Zimbra
CVE-2016-5721

6.1MEDIUM

Key Information:

Vendor

Zimbra

Status
Zimbra Collaboration Server
Vendor
CVE Published:
29 August 2016

What is CVE-2016-5721?

Multiple cross-site scripting (XSS) vulnerabilities exist in Zimbra Collaboration prior to version 8.7.0. These vulnerabilities enable remote attackers to inject arbitrary web scripts or HTML code through unspecified vectors, potentially leading to unauthorized actions or data exposure. Users are advised to update their software to mitigate these security risks.

References

http://www.securityfocus.com/bid/92682
vdb-entryx_refsource_BID
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.