The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

🗓️ 25 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Zimbra Collaboration Suite vulnerability exposes remote cross site scripting.

Reporter	Title	Published	Views	Family All 22
ATTACKERKB	CVE-2024-27443	12 Aug 202400:00	–	attackerkb
Information Security Automation	June “In the Trend of VM” (#16): vulnerabilities in Microsoft Windows, Apache HTTP Server, the web interfaces of MDaemon and Zimbra, and the 7-Zip archiver	21 Jun 202513:39	–	avleonov
Information Security Automation	About Cross Site Scripting – MDaemon Email Server (CVE-2024-11182)	29 May 202521:46	–	avleonov
Information Security Automation	About Cross Site Scripting – Zimbra Collaboration (CVE-2024-27443) vulnerability	3 Jun 202512:54	–	avleonov
Circl	CVE-2024-27443	12 Aug 202418:27	–	circl
CISA KEV Catalog	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	19 May 202500:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	19 May 202512:00	–	cisa
CNNVD	Zimbra Collaboration Server 安全漏洞	12 Aug 202400:00	–	cnnvd
CVE	CVE-2024-27443	12 Aug 202400:00	–	cve
Cvelist	CVE-2024-27443	12 Aug 202400:00	–	cvelist

Vulners

Node

zimbra zimbra_collaboration_suiteMatch9.0

OR

zimbra zimbra_collaboration_suiteMatch10.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-27443
wiki	www.wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7
wiki	www.wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

25 Jun 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 36.1

CVSS 26.4

EPSS0.3288

Zimbra Collaboration Suite website structure protection cross site scripting remote exploitation