Lucene search
HistoryJul 06, 2023 - 4:15 p.m.
CVE-2023-29382
zimbra collaboration
arbitrary code execution
sfdc_preauth.jsp
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.2%
An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.
Affected configurations
Node
zimbracollaborationMatch8.8.15-
ORzimbracollaborationMatch8.8.15p1
ORzimbracollaborationMatch8.8.15p10
ORzimbracollaborationMatch8.8.15p11
ORzimbracollaborationMatch8.8.15p12
ORzimbracollaborationMatch8.8.15p13
ORzimbracollaborationMatch8.8.15p14
ORzimbracollaborationMatch8.8.15p15
ORzimbracollaborationMatch8.8.15p16
ORzimbracollaborationMatch8.8.15p17
ORzimbracollaborationMatch8.8.15p18
ORzimbracollaborationMatch8.8.15p19
ORzimbracollaborationMatch8.8.15p2
ORzimbracollaborationMatch8.8.15p20
ORzimbracollaborationMatch8.8.15p21
ORzimbracollaborationMatch8.8.15p22
ORzimbracollaborationMatch8.8.15p23
ORzimbracollaborationMatch8.8.15p24
ORzimbracollaborationMatch8.8.15p25
ORzimbracollaborationMatch8.8.15p26
ORzimbracollaborationMatch8.8.15p27
ORzimbracollaborationMatch8.8.15p28
ORzimbracollaborationMatch8.8.15p29
ORzimbracollaborationMatch8.8.15p3
ORzimbracollaborationMatch8.8.15p30
ORzimbracollaborationMatch8.8.15p31
ORzimbracollaborationMatch8.8.15p32
ORzimbracollaborationMatch8.8.15p33
ORzimbracollaborationMatch8.8.15p34
ORzimbracollaborationMatch8.8.15p35
ORzimbracollaborationMatch8.8.15p37
ORzimbracollaborationMatch8.8.15p4
ORzimbracollaborationMatch8.8.15p5
ORzimbracollaborationMatch8.8.15p6
ORzimbracollaborationMatch8.8.15p7
ORzimbracollaborationMatch8.8.15p8
ORzimbracollaborationMatch8.8.15p9
ORzimbracollaborationMatch9.0.0
ORzimbracollaborationMatch9.0.0-
ORzimbracollaborationMatch9.0.0p0
ORzimbracollaborationMatch9.0.0p1
ORzimbracollaborationMatch9.0.0p10
ORzimbracollaborationMatch9.0.0p11
ORzimbracollaborationMatch9.0.0p12
ORzimbracollaborationMatch9.0.0p13
ORzimbracollaborationMatch9.0.0p14
ORzimbracollaborationMatch9.0.0p15
ORzimbracollaborationMatch9.0.0p16
ORzimbracollaborationMatch9.0.0p19
ORzimbracollaborationMatch9.0.0p2
ORzimbracollaborationMatch9.0.0p20
ORzimbracollaborationMatch9.0.0p21
ORzimbracollaborationMatch9.0.0p23
ORzimbracollaborationMatch9.0.0p24
ORzimbracollaborationMatch9.0.0p24.1
ORzimbracollaborationMatch9.0.0p25
ORzimbracollaborationMatch9.0.0p26
ORzimbracollaborationMatch9.0.0p27
ORzimbracollaborationMatch9.0.0p3
ORzimbracollaborationMatch9.0.0p4
ORzimbracollaborationMatch9.0.0p5
ORzimbracollaborationMatch9.0.0p6
ORzimbracollaborationMatch9.0.0p7
ORzimbracollaborationMatch9.0.0p7.1
ORzimbracollaborationMatch9.0.0p8
ORzimbracollaborationMatch9.0.0p9
Related
osv
osv
CVE-2023-29382
2023-07-06 16:15:09
prion
prion
Design/Logic Flaw
2023-07-06 16:15:00
cvelist
cvelist
CVE-2023-29382
2023-07-06 00:00:00
cve
cve
CVE-2023-29382
2023-07-06 16:15:09
nessus
nessus
Zimbra Collaboration Server 9.0.0 < 9.0.0 Patch 33 Multiple Vulnerabilities
2023-07-20 00:00:00
Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 40 Multiple Vulnerabilities
2023-07-20 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.2%
Related for NVD:CVE-2023-29382