CVE-2024-45194: Improper Neutralization of Input During Web Page Generation

In Zimbra Collaboration ZCS 9.0 and 10.0, a vulnerability in the Webmail Modern UI allows execution of stored Cross-Site Scripting XSS payloads. An attacker with administrative access to the Zimbra Administration Panel can inject malicious JavaScript code while configuring an email account. This...

CVE-2024-45194

Zimbra Collaboration (ZCS) versions 9.0 and 10.0 are susceptible to a stored Cross-Site Scripting (XSS) vulnerability within the Webmail Modern UI . An attacker with administrative access to the Zimbra Administration Panel can inject malicious JavaScript code during email account configuration. T...

CVE-2024-45510: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zimbra Collaboration ZCS through 10.0. Zimbra Webmail Modern UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper sanitization of user input. This allows an attacker to inject malicious code into specific fields of an e-mail message. When the...