CVE-2017-8802
MEDIUM 5.4EPSS 1.3%
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality.
- CVSS v3.0 NVD
- 5.4 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 1.27% chance of exploitation in the next 30 days, 69th percentile
- Published
- 2018-01-16
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
- ozzi-/Zimbra-CVE-2017-8802-Hotifx0★ · 2018-01-23
Security advisories
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-001_zimbr…