VDB
BDU%3A2022-05422
BDU%3A2022-05422
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость компонента Calendar корпоративной системы управления электронной почтой Zimbra Collaboration Suite, позволяющая нарушителю внедрить произвольную разметку в документ
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zimbra Inc. | Zimbra Collaboration Suite |
Timeline
- Aug 31, 2022 CVE Published
- Sep 24, 2024 CVE Updated
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog url
- https://nvd.nist.gov/vuln/detail/CVE-2022-24682 url
- https://blog.zimbra.com/2022/02/hotfix-available-5-feb-for-zero-day-exploit-vulnerability-in-zimbra-8-8-15/ url
- https://wiki.zimbra.com/wiki/Security_Center url
- https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P30 url
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories url
- https://www.volexity.com/blog/2022/02/03/operation-emailthief-active-exploitation-of-zero-day-xss-vulnerability-in-zimbra/ url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url