Back to CVE Browser

CVE-2023-37580

🔥 Known Exploited (CISA KEV)MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-07-31

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.

Affected Platforms (CPE)

📦

Synacor

Zimbra Collaboration Suite

>= 8.8.0 and < 8.8.15= 8.8.15

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2023/11/17/2

🔗 https://wiki.zimbra.com/wiki/Security_Center

🔗 https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

🔗 http://www.openwall.com/lists/oss-security/2023/11/17/2

🔗 https://wiki.zimbra.com/wiki/Security_Center

🔗 https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580

Related Vulnerabilities

CVE-2026-611427.7

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that ...

CVE-2026-611417.5

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported vers...

CVE-2026-611387.5

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Opera...

CVE-2026-611257.7

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Support...