VDB
CVE-2023-38750
CVE-2023-38750
PUBLISHED
CVSS 7.5 HIGH
In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
EPSS 0.87% · 58.3th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.87%
58.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| zimbra | zimbra | 8.8.15, 8.8.0, 8.8.15 |
| n/a | n/a | n/a |
Timeline
- Jul 26, 2023 CVE Published
- Aug 1, 2023 EPSS Score
- Sep 5, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Nov 13, 2023 EPSS Score
- Dec 18, 2023 EPSS Score
- Jan 22, 2024 EPSS Score
- Feb 25, 2024 EPSS Score
- Mar 31, 2024 EPSS Score
- May 5, 2024 EPSS Score
- Jun 9, 2024 EPSS Score
- Jul 13, 2024 EPSS Score
References
- https://wiki.zimbra.com/wiki/Security_Center url
- https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy url
- https://nvd.nist.gov/vuln/detail/CVE-2023-38750 advisory
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.2 advisory
- https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P41 advisory
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P34 advisory