CVE-2018-6882 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

provenance: imported · CVE: CVE-2018-6882

CVE-2018-6882: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Synacor
Product	Zimbra Collaboration Suite (ZCS)
Date added	2022-04-19
Due date	2022-05-10
Ransomware campaign use	Known

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-6882

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-6882
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog