Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-27443

🗓️ 12 Aug 2024 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 185 Views

Zimbra Collaboration XSS vulnerability in CalendarInvite

Related
Detection
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2024-27443
12 Aug 202400:00
–attackerkb
Information Security Automation		June “In the Trend of VM” (#16): vulnerabilities in Microsoft Windows, Apache HTTP Server, the web interfaces of MDaemon and Zimbra, and the 7-Zip archiver
21 Jun 202513:39
–avleonov
Information Security Automation		About Cross Site Scripting – MDaemon Email Server (CVE-2024-11182)
29 May 202521:46
–avleonov
Information Security Automation		About Cross Site Scripting – Zimbra Collaboration (CVE-2024-27443) vulnerability
3 Jun 202512:54
–avleonov
Circl		CVE-2024-27443
12 Aug 202418:27
–circl
CISA KEV Catalog		Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
19 May 202500:00
–cisa_kev
CISA		 CISA Adds Six Known Exploited Vulnerabilities to Catalog
19 May 202512:00
–cisa
CNNVD		Zimbra Collaboration Server 安全漏洞
12 Aug 202400:00
–cnnvd
Cvelist		CVE-2024-27443
12 Aug 202400:00
–cvelist
HackRead		Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected
24 May 202514:28
–hackread
Rows per page
NVD
Node
zimbracollaborationRange10.0.0–10.0.7
OR
zimbracollaborationMatch9.0.0-
OR
zimbracollaborationMatch9.0.0p0
OR
zimbracollaborationMatch9.0.0p1
OR
zimbracollaborationMatch9.0.0p10
OR
zimbracollaborationMatch9.0.0p11
OR
zimbracollaborationMatch9.0.0p12
OR
zimbracollaborationMatch9.0.0p13
OR
zimbracollaborationMatch9.0.0p14
OR
zimbracollaborationMatch9.0.0p15
OR
zimbracollaborationMatch9.0.0p16
OR
zimbracollaborationMatch9.0.0p19
OR
zimbracollaborationMatch9.0.0p2
OR
zimbracollaborationMatch9.0.0p20
OR
zimbracollaborationMatch9.0.0p21
OR
zimbracollaborationMatch9.0.0p23
OR
zimbracollaborationMatch9.0.0p24
OR
zimbracollaborationMatch9.0.0p24.1
OR
zimbracollaborationMatch9.0.0p25
OR
zimbracollaborationMatch9.0.0p26
OR
zimbracollaborationMatch9.0.0p27
OR
zimbracollaborationMatch9.0.0p3
OR
zimbracollaborationMatch9.0.0p30
OR
zimbracollaborationMatch9.0.0p31
OR
zimbracollaborationMatch9.0.0p32
OR
zimbracollaborationMatch9.0.0p33
OR
zimbracollaborationMatch9.0.0p34
OR
zimbracollaborationMatch9.0.0p35
OR
zimbracollaborationMatch9.0.0p36
OR
zimbracollaborationMatch9.0.0p37
OR
zimbracollaborationMatch9.0.0p38
OR
zimbracollaborationMatch9.0.0p4
OR
zimbracollaborationMatch9.0.0p5
OR
zimbracollaborationMatch9.0.0p6
OR
zimbracollaborationMatch9.0.0p7
OR
zimbracollaborationMatch9.0.0p7.1
OR
zimbracollaborationMatch9.0.0p8
OR
zimbracollaborationMatch9.0.0p9

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
31 Oct 2025 12:49Current
5.1Medium risk
Vulners AI Score5.1
CVSS 3.16.1
EPSS0.32434
SSVC
CWE-79In Wild
zimbra collaborationxss vulnerabilitycalendarinvitewebmailinput validationemail messagecrafted calendar headerxss payloadvictim's session
185