ID de Prueba:	1.3.6.1.4.1.25623.1.0.812800
Categoría:	Web application abuses
Título:	Zimbra Collaboration Suite < 8.7.10 Persistent XSS Vulnerability (Feb 2018)
Resumen:	Zimbra Collaboration Suite is prone to a persistent cross-site; scripting (XSS) vulnerability.
Descripción:	Summary: Zimbra Collaboration Suite is prone to a persistent cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is due to an input validation error while opening an email in the conversation view of the web interface. Vulnerability Impact: This issue allows an attacker to perform a wide variety of actions such as performing arbitrary actions on their behalf or presenting a fake login screen to collect usernames and passwords. Affected Software/OS: Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10. Solution: Update to version 8.7.10 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8783
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.