Vulnerabilities CVE-2018-6882

CVE-2018-6882

Medium

Open

KEV

TLP:CLEAR

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment.

Details

EPSS Score ⓘ: 25.42%

97.8th percentile
Confidence: 100%
Published: Mar 27, 2018
Last Modified: Aug 13, 2026
CISA KEV
Date Added: Apr 19, 2022
Patch Due: May 10, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.