CVE-2024-45513 - Vulnerability Details

Vendors	Products
Synacor	Zimbra Collaboration Suite

Link	Providers
https://wiki.zimbra.com/wiki/Security_Center
https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes
https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

Type	Values Removed	Values Added
First Time appeared		Synacor Synacor zimbra Collaboration Suite
CPEs		cpe:2.3:a:synacor:zimbra_collaboration_suite:::::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.0:::::::* cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p12:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p15:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p21:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p29:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p30:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p31:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p32:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p34:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p35:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p36:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p37:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p39:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p40:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:::::: cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9::::::
Vendors & Products		Synacor Synacor zimbra Collaboration Suite

Type	Values Removed	Values Added
Weaknesses		CWE-79
Metrics		cvssV3_1 `{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session.
References		https://wiki.zimbra.com/wiki/Security_Center https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-45513", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-11-21T18:03:40.186Z", "dateReserved": "2024-09-01T00:00:00", "datePublished": "2024-11-21T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-11-21T16:55:24.091328"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://wiki.zimbra.com/wiki/Security_Center"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-11-21T18:03:21.293467Z", "id": "CVE-2024-45513", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-21T18:03:40.186Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2024-45513 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-11-21T18:03:40.186Z (string)

dateReserved : 2024-09-01T00:00:00 (string)

datePublished : 2024-11-21T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-11-21T16:55:24.091328 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://wiki.zimbra.com/wiki/Security_Center (string)

}

1 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy (string)

}

2 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes (string)

}

3 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes (string)

}

4 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-79 (string)

lang : en (string)

description : CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 4.8 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-21T18:03:21.293467Z (string)

id : CVE-2024-45513 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-21T18:03:40.186Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-45513", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-21T18:03:21.293467Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-21T18:03:36.596Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://wiki.zimbra.com/wiki/Security_Center"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes"}, {"url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-11-21T16:55:24.091328"}}}, "cveMetadata": {"cveId": "CVE-2024-45513", "state": "PUBLISHED", "dateUpdated": "2024-11-21T18:03:40.186Z", "dateReserved": "2024-09-01T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-11-21T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 4.8 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-45513 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-21T18:03:21.293467Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-79 (string)

description : CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-21T18:03:36.596Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://wiki.zimbra.com/wiki/Security_Center (string)

}

1 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy (string)

}

2 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes (string)

}

3 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes (string)

}

4 : { »

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-11-21T16:55:24.091328 (string)

}

cveMetadata : { »

cveId : CVE-2024-45513 (string)

state : PUBLISHED (string)

dateUpdated : 2024-11-21T18:03:40.186Z (string)

dateReserved : 2024-09-01T00:00:00 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2024-11-21T00:00:00 (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "95359DBD-9E47-43B2-8B26-0C906059E24B", "versionEndExcluding": "9.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC78301D-6403-496F-A349-1C7BAC37797D", "versionEndExcluding": "10.0.9", "versionStartIncluding": "10.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*", "matchCriteriaId": "32AFCE22-5ADA-4FF7-A165-5EC12B325DEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*", "matchCriteriaId": "D3577FE6-F1F4-4555-8D27-84D6DE731EA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:*", "matchCriteriaId": "931BD98E-1A5F-4634-945B-BDD7D2FAA8B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:*", "matchCriteriaId": "2E7C0A57-A887-4D29-B601-4275313F46B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p12:*:*:*:*:*:*", "matchCriteriaId": "B7248B91-D136-4DD5-A631-737E4C220A02", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*", "matchCriteriaId": "494F6FD4-36ED-4E40-8336-7F077FA80FA8", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*", "matchCriteriaId": "9DF8C0CE-A71D-4BB1-83FB-1EA5ED77E0C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p15:*:*:*:*:*:*", "matchCriteriaId": "E0648498-2EE5-4B68-8360-ED5914285356", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*", "matchCriteriaId": "24282FF8-548B-415B-95CA-1EFD404D21D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*", "matchCriteriaId": "ACFDF2D9-ED72-4969-AA3B-E8D48CB1922D", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:*", "matchCriteriaId": "2B7D0A8B-7A72-4C1A-85F2-BE336CA47E0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*", "matchCriteriaId": "019AFC34-289E-4A01-B08B-A5807F7F909A", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:*", "matchCriteriaId": "7E7B3976-DA6F-4285-93E6-2328006F7F4D", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*", "matchCriteriaId": "062E586F-0E02-45A6-93AD-895048FC2D4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p21:*:*:*:*:*:*", "matchCriteriaId": "3EE37BEE-4BDB-4E62-8DE3-98CF74DFBE01", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:*", "matchCriteriaId": "ADF51BCA-37DD-4642-B201-74A6D1A545FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*", "matchCriteriaId": "39611F3D-A898-4C35-8915-3334CDFB78E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*", "matchCriteriaId": "40AB56B7-7222-4C44-A271-45DFE3673F72", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:*:*:*:*:*:*", "matchCriteriaId": "2AE8F501-4528-4F15-AE50-D4F11FB462DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*", "matchCriteriaId": "AB9E054B-7790-4E74-A771-40BF6EC71610", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*", "matchCriteriaId": "DD924E57-C77B-430B-A615-537BB39CEA9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*", "matchCriteriaId": "F43F4AC0-7C82-4CF4-B0C7-3A4C567BC985", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:*", "matchCriteriaId": "7991F602-41D7-4377-B888-D66A467EAD67", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p29:*:*:*:*:*:*", "matchCriteriaId": "2193FCA2-1AE3-497D-B0ED-5B89727410E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*", "matchCriteriaId": "FA310AFA-492D-4A6C-A7F6-740E82CB6E57", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p30:*:*:*:*:*:*", "matchCriteriaId": "FF95618B-0BFB-403C-83BE-C97879FC866D", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p31:*:*:*:*:*:*", "matchCriteriaId": "A82346A9-9CC2-4B91-BA2F-A815AAA92A7F", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p32:*:*:*:*:*:*", "matchCriteriaId": "2E800348-E139-418D-910B-7B3A9E1E721C", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*", "matchCriteriaId": "C7DE1A7E-573B-42F3-B0A4-D2E676954FE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p34:*:*:*:*:*:*", "matchCriteriaId": "E60BC1D0-8552-4E6B-B2C5-96038448C238", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p35:*:*:*:*:*:*", "matchCriteriaId": "3924251E-13B0-420E-8080-D3312C3D54AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p36:*:*:*:*:*:*", "matchCriteriaId": "AEBE75F9-A494-4C78-927A-EA564BDCCE0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p37:*:*:*:*:*:*", "matchCriteriaId": "900BECBA-7FDB-4E35-9603-29706FB87BD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:*", "matchCriteriaId": "5024FD58-A3ED-43B1-83EF-F4570C2573BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p39:*:*:*:*:*:*", "matchCriteriaId": "3CC9D046-4EB4-4608-8AB7-B60AC330A770", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*", "matchCriteriaId": "2AF337B5-B296-449B-8848-7636EC7C46C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p40:*:*:*:*:*:*", "matchCriteriaId": "A4535EC5-74D5-41E8-95F1-5C033ADB043E", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:*", "matchCriteriaId": "52232ACA-C158-48C8-A0DB-7689040CB8FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:*", "matchCriteriaId": "3B4D0040-86D0-46C3-8A9A-3DD12138B9ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*", "matchCriteriaId": "D2BB9BC7-078D-4E08-88E4-9432D74CA9BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:*", "matchCriteriaId": "F04D4B77-D386-4BC8-8169-9846693F6F11", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*", "matchCriteriaId": "992370FA-F171-4FB3-9C1C-58AC37038CE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "C936B30B-C717-442B-8656-CF9EE3FC7C10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Zimbra Collaboration (ZCS) hasta la versi\u00f3n 10.1. Existe una vulnerabilidad de cross site scripting (XSS) almacenado en el endpoint /modern/contacts/print del correo web de Zimbra. Esto permite que un atacante inyecte y ejecute c\u00f3digo JavaScript arbitrario en el contexto del navegador de la v\u00edctima cuando se procesa e imprime un archivo vCard (VCF) manipulado. Esto podr\u00eda provocar acciones no autorizadas dentro de la sesi\u00f3n de la v\u00edctima."}], "id": "CVE-2024-45513", "lastModified": "2025-06-11T21:17:25.640", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-11-21T17:15:15.793", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://wiki.zimbra.com/wiki/Security_Center"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 95359DBD-9E47-43B2-8B26-0C906059E24B (string)

versionEndExcluding : 9.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CC78301D-6403-496F-A349-1C7BAC37797D (string)

versionEndExcluding : 10.0.9 (string)

versionStartIncluding : 10.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 32AFCE22-5ADA-4FF7-A165-5EC12B325DEF (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:* (string)

matchCriteriaId : D3577FE6-F1F4-4555-8D27-84D6DE731EA3 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:* (string)

matchCriteriaId : 931BD98E-1A5F-4634-945B-BDD7D2FAA8B0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:* (string)

matchCriteriaId : 2E7C0A57-A887-4D29-B601-4275313F46B3 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p12:*:*:*:*:*:* (string)

matchCriteriaId : B7248B91-D136-4DD5-A631-737E4C220A02 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:* (string)

matchCriteriaId : 494F6FD4-36ED-4E40-8336-7F077FA80FA8 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:* (string)

matchCriteriaId : 9DF8C0CE-A71D-4BB1-83FB-1EA5ED77E0C9 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p15:*:*:*:*:*:* (string)

matchCriteriaId : E0648498-2EE5-4B68-8360-ED5914285356 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:* (string)

matchCriteriaId : 24282FF8-548B-415B-95CA-1EFD404D21D3 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:* (string)

matchCriteriaId : ACFDF2D9-ED72-4969-AA3B-E8D48CB1922D (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:* (string)

matchCriteriaId : 2B7D0A8B-7A72-4C1A-85F2-BE336CA47E0B (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:* (string)

matchCriteriaId : 019AFC34-289E-4A01-B08B-A5807F7F909A (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:* (string)

matchCriteriaId : 7E7B3976-DA6F-4285-93E6-2328006F7F4D (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:* (string)

matchCriteriaId : 062E586F-0E02-45A6-93AD-895048FC2D4C (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p21:*:*:*:*:*:* (string)

matchCriteriaId : 3EE37BEE-4BDB-4E62-8DE3-98CF74DFBE01 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:* (string)

matchCriteriaId : ADF51BCA-37DD-4642-B201-74A6D1A545FF (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:* (string)

matchCriteriaId : 39611F3D-A898-4C35-8915-3334CDFB78E5 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:* (string)

matchCriteriaId : 40AB56B7-7222-4C44-A271-45DFE3673F72 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:*:*:*:*:*:* (string)

matchCriteriaId : 2AE8F501-4528-4F15-AE50-D4F11FB462DE (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:* (string)

matchCriteriaId : AB9E054B-7790-4E74-A771-40BF6EC71610 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:* (string)

matchCriteriaId : DD924E57-C77B-430B-A615-537BB39CEA9C (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:* (string)

matchCriteriaId : F43F4AC0-7C82-4CF4-B0C7-3A4C567BC985 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:* (string)

matchCriteriaId : 7991F602-41D7-4377-B888-D66A467EAD67 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p29:*:*:*:*:*:* (string)

matchCriteriaId : 2193FCA2-1AE3-497D-B0ED-5B89727410E3 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:* (string)

matchCriteriaId : FA310AFA-492D-4A6C-A7F6-740E82CB6E57 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p30:*:*:*:*:*:* (string)

matchCriteriaId : FF95618B-0BFB-403C-83BE-C97879FC866D (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p31:*:*:*:*:*:* (string)

matchCriteriaId : A82346A9-9CC2-4B91-BA2F-A815AAA92A7F (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p32:*:*:*:*:*:* (string)

matchCriteriaId : 2E800348-E139-418D-910B-7B3A9E1E721C (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:* (string)

matchCriteriaId : C7DE1A7E-573B-42F3-B0A4-D2E676954FE0 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p34:*:*:*:*:*:* (string)

matchCriteriaId : E60BC1D0-8552-4E6B-B2C5-96038448C238 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p35:*:*:*:*:*:* (string)

matchCriteriaId : 3924251E-13B0-420E-8080-D3312C3D54AF (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p36:*:*:*:*:*:* (string)

matchCriteriaId : AEBE75F9-A494-4C78-927A-EA564BDCCE0B (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p37:*:*:*:*:*:* (string)

matchCriteriaId : 900BECBA-7FDB-4E35-9603-29706FB87BD2 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:* (string)

matchCriteriaId : 5024FD58-A3ED-43B1-83EF-F4570C2573BA (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p39:*:*:*:*:*:* (string)

matchCriteriaId : 3CC9D046-4EB4-4608-8AB7-B60AC330A770 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:* (string)

matchCriteriaId : 2AF337B5-B296-449B-8848-7636EC7C46C5 (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p40:*:*:*:*:*:* (string)

matchCriteriaId : A4535EC5-74D5-41E8-95F1-5C033ADB043E (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:* (string)

matchCriteriaId : 52232ACA-C158-48C8-A0DB-7689040CB8FB (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:* (string)

matchCriteriaId : 3B4D0040-86D0-46C3-8A9A-3DD12138B9ED (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:* (string)

matchCriteriaId : D2BB9BC7-078D-4E08-88E4-9432D74CA9BA (string)

vulnerable : true (boolean)

}

42 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:* (string)

matchCriteriaId : F04D4B77-D386-4BC8-8169-9846693F6F11 (string)

vulnerable : true (boolean)

}

43 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:* (string)

matchCriteriaId : 992370FA-F171-4FB3-9C1C-58AC37038CE4 (string)

vulnerable : true (boolean)

}

44 : { »

criteria : cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C936B30B-C717-442B-8656-CF9EE3FC7C10 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session. (string)

}

1 : { »

lang : es (string)

value : Se descubrió un problema en Zimbra Collaboration (ZCS) hasta la versión 10.1. Existe una vulnerabilidad de cross site scripting (XSS) almacenado en el endpoint /modern/contacts/print del correo web de Zimbra. Esto permite que un atacante inyecte y ejecute código JavaScript arbitrario en el contexto del navegador de la víctima cuando se procesa e imprime un archivo vCard (VCF) manipulado. Esto podría provocar acciones no autorizadas dentro de la sesión de la víctima. (string)

}

]

id : CVE-2024-45513 (string)

lastModified : 2025-06-11T21:17:25.640 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.7 (number)

impactScore : 2.7 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-11-21T17:15:15.793 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://wiki.zimbra.com/wiki/Security_Center (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes (string)

}

3 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes (string)

}

4 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Product (string)

]

url : https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object