CVE-2023-37580: Zimbra XSS Vulnerability Exploited by Threat Actors
A cross-site scripting vulnerability in Zimbra that was exploited by threat actors. Part of a series of XSS flaws targeting Zimbra's web…
Tag: Zimbra
CVE-2024-27443: Zimbra XSS Vulnerability Exploited by Threat Actors
A cross-site scripting vulnerability in Zimbra that was exploited by threat actors. Part of a series of XSS flaws targeting Zimbra's web…
Zimbra Classic Web Client: XSS Vulnerabilities Patched
The Classic Web Client in Zimbra had four XSS vulnerabilities patched, including stored XSS via attachment filenames and crafted fields.
Critical Zimbra Classic Web Client XSS Flaw Enables Code Execution via Crafted Emails
Zimbra has disclosed a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client that could allow attackers to execute arbitrary…
CVE-2025-27915: Zimbra Classic Web Client Stored XSS Vulnerability
A stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client (CVSS 5.4) that was allegedly exploited as a zero-day against the…
StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
CVE-2022-27925: Zimbra Collaboration Suite Flaw Exploited in StrikeShark
CVE-2022-27925 is a vulnerability in Zimbra Collaboration Suite that allows remote code execution. It was used in the StrikeShark campaign.
Zimbra: Email Collaboration Software Provider
Zimbra provides email and collaboration software. It recently patched multiple critical vulnerabilities including SNMP command injection and XSS flaws.
Zimbra Collaboration Suite: Enterprise Email and Collaboration Platform
Zimbra's flagship product offering email, calendar, and collaboration features. Version 10.1.19 includes a fix for a critical stored XSS vulnerability in the…