8 matches found
CVE-2026-93638
A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite ZCS allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input...
CVE-2026-93638 Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter
A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite ZCS allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input...
CVE-2026-93638
The Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.17 are vulnerable to a pre-authentication reflected cross-site scripting (XSS) vulnerability. The flaw exists in the login page when processing the zrememberme parameter. An unauthenticated attacker can craft a relogin URL that trigge...
EUVD-2026-108977
A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite ZCS allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input...
CVE-2026-93638 Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter
A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite ZCS allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input...
CVE-2026-93638
A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite ZCS allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input...
Zimbra Collaboration Suite cross-site scripting vulnerability
Versions 10.1.16 and 10.1.17 of the Zimbra Collaboration Suite contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of the zrememberme parameter on the login page; the parameter is inserted into hidden input fields without HTML encoding. This may lead to...
PT-2026-122117
A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite ZCS allows an unauthenticated attacker to execute JavaScript through the zrememberme parameter. A crafted relogin URL selects a two-factor error display that inserts the parameter into a hidden input...