Cisco Prime Collaboration Provisioning Tool User Provisioning Tab Cross-Site Scripting Vulnerability

A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by...

Cisco Prime Collaboration Provisioning Tool Web Portal Repeated Bad Login Attempts Denial of Service Vulnerability

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service DoS condition for individual users. The vulnerability is due to weak login controls. An attacker could exploit this vulnerability by...

VIDEO: Carbon Black Hackathon Competition Features MBTA Charlie Tracker

The Carbon Black R&D team just finished its third quarterly “hackathon” – a block of free time completely dedicated to collaboration and innovation. Projects can be anything a submitting team desires and submission do not need to be related to a product or even Carbon Black itself. The main purpo...

Inside the MSRC– The Monthly Security Update Releases

For the second in this series of blog entries we want to look into which vulnerability reports make it into the monthly release cadence. It may help to start with some history. In September 2003 we made a change from a release anytime approach to a mostly predictable, monthly release cadence...

February 9, 2018 – Morning Cyber Coffee Headlines – “Opening Ceremony” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 9, 2018 - Headlines Carbon Black in the News: 10 Questions Today’s CEO...

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, Inc. that includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Synacor ZCS versions prior to 8.7.10. A remote attacker can exploit this vulnerability to inject...

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, Inc. that includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Synacor ZCS. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HT...

Cross site scripting

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-8783

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-17703

Synacor Zimbra Collaboration Suite ZCS before 8.8.3 has Persistent XSS...

Cross site scripting

Synacor Zimbra Collaboration Suite ZCS before 8.8.3 has Persistent XSS...

CVE-2017-17703

Synacor Zimbra Collaboration Suite ZCS before 8.8.3 has Persistent XSS...

CVE-2017-8783

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-8783

CVE-2017-8783: Zimbra Collaboration Suite (ZCS) before 8.7.10 is vulnerable to a persistent cross-site scripting (XSS) vulnerability. The issue is documented across multiple feeds (NVD, OpenVAS) as affecting Zimbra WebMail/Calendar/Address Book components before version 8.7.10. The connected docu...

CVE-2017-17703

CVE-2017-17703 affects Synacor Zimbra Collaboration Suite (ZCS) before version 8.8.3, with a persistent cross-site scripting (XSS) vulnerability. The issue is documented across multiple sources (NVD entry for CVE-2017-17703, OpenVAS note, CNVD entry) and is described as a persistent XSS in ZCS pr...

CVE-2017-8802

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite aka ZCS before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality...

CVE-2017-8802

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite aka ZCS before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality...

Cross site scripting

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite aka ZCS before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality...

CVE-2017-8802

CVE-2017-8802 affects Zimbra Collaboration Suite (ZCS) prior to 8.8.0 Beta2. The issue is a cross-site scripting (XSS) vulnerability in the Show Snippet functionality, allowing an attacker to inject arbitrary web script or HTML in the authenticated Zimbra web UI. Root cause: improper handling of ...

CVE-2017-8802

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite aka ZCS before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality...