CVE Vulnerabilities

CVE-2023-38750

Published: Jul 31, 2023 | Modified: Aug 04, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.

Affected Software

Name Vendor Start Version End Version
Zimbra Zimbra 8.8.0 (including) 8.8.15 (excluding)
Zimbra Zimbra 8.8.15-p11 (including) 8.8.15-p11 (including)
Zimbra Zimbra 8.8.15-p26 (including) 8.8.15-p26 (including)
Zimbra Zimbra 8.8.15-p3 (including) 8.8.15-p3 (including)
Zimbra Zimbra 8.8.15-p30 (including) 8.8.15-p30 (including)
Zimbra Zimbra 8.8.15-p31 (including) 8.8.15-p31 (including)
Zimbra Zimbra 8.8.15-p32 (including) 8.8.15-p32 (including)
Zimbra Zimbra 8.8.15-p33 (including) 8.8.15-p33 (including)
Zimbra Zimbra 8.8.15-p34 (including) 8.8.15-p34 (including)
Zimbra Zimbra 8.8.15-p35 (including) 8.8.15-p35 (including)
Zimbra Zimbra 8.8.15-p37 (including) 8.8.15-p37 (including)
Zimbra Zimbra 8.8.15-p38 (including) 8.8.15-p38 (including)
Zimbra Zimbra 8.8.15-p40 (including) 8.8.15-p40 (including)
Zimbra Zimbra 8.8.15-p5 (including) 8.8.15-p5 (including)
Zimbra Zimbra 9.0.0 (including) 9.0.0 (including)
Zimbra Zimbra 9.0.0-p0 (including) 9.0.0-p0 (including)
Zimbra Zimbra 9.0.0-p19 (including) 9.0.0-p19 (including)
Zimbra Zimbra 9.0.0-p23 (including) 9.0.0-p23 (including)
Zimbra Zimbra 9.0.0-p25 (including) 9.0.0-p25 (including)
Zimbra Zimbra 9.0.0-p26 (including) 9.0.0-p26 (including)
Zimbra Zimbra 9.0.0-p27 (including) 9.0.0-p27 (including)
Zimbra Zimbra 9.0.0-p28 (including) 9.0.0-p28 (including)
Zimbra Zimbra 9.0.0-p30 (including) 9.0.0-p30 (including)
Zimbra Zimbra 9.0.0-p31 (including) 9.0.0-p31 (including)
Zimbra Zimbra 9.0.0-p33 (including) 9.0.0-p33 (including)
Zimbra Zimbra 9.0.0-p4 (including) 9.0.0-p4 (including)
Zimbra Zimbra 9.0.0-p7 (including) 9.0.0-p7 (including)
Zimbra Zimbra 9.0.0-p7.1 (including) 9.0.0-p7.1 (including)
Zimbra Zimbra 10.0.1 (including) 10.0.1 (including)

References