Tag: CVE-2023-37580

Critical CVEs

CVE-2023-37580: Zimbra XSS Vulnerability Exploited by Threat Actors

A cross-site scripting vulnerability in Zimbra that was exploited by threat actors. Part of a series of XSS flaws targeting Zimbra's web…

CVE-2023-37580 exploited XSS Zimbra

July 11, 2026

Critical CVEs

Critical Zimbra Classic Web Client XSS Flaw Enables Code Execution via Crafted Emails

Zimbra has disclosed a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client that could allow attackers to execute arbitrary…

arbitrary code execution Classic Web Client cross-site scripting CVE-2023-37580

July 11, 2026