Back to CVE Browser

CVE-2023-34192

🔥 Known Exploited (CISA KEV)CRITICAL

9.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-07-06

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

Affected Platforms (CPE)

📦

Synacor

Zimbra Collaboration Suite

= 8.8.15

References & Advisories

🔗 https://wiki.zimbra.com/wiki/Security_Center

🔗 https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

🔗 https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

🔗 https://wiki.zimbra.com/wiki/Security_Center

🔗 https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

🔗 https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-34192

Related Vulnerabilities

CVE-2026-611427.7

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that ...

CVE-2026-611417.5

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported vers...

CVE-2026-611387.5

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Opera...

CVE-2026-611257.7

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Support...