← Back

CVE-2023-29382

nvd nist
Published: Jul 6, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.

Affected (66)

Zimbra
1 product
Collaboration
Configuration A
66 vulnerable
Vulnerable SoftwareAffected Versions
Zimbra
Collaboration
Version 8.8.15
Collaboration
Version 8.8.15 p10
Collaboration
Version 8.8.15 p11
Collaboration
Version 8.8.15 p12
Collaboration
Version 8.8.15 p13
Collaboration
Version 8.8.15 p14
Collaboration
Version 8.8.15 p15
Collaboration
Version 8.8.15 p16
Collaboration
Version 8.8.15 p17
Collaboration
Version 8.8.15 p18
Collaboration
Version 8.8.15 p19
Collaboration
Version 8.8.15 p1
Collaboration
Version 8.8.15 p20
Collaboration
Version 8.8.15 p21
Collaboration
Version 8.8.15 p22
Collaboration
Version 8.8.15 p23
Collaboration
Version 8.8.15 p24
Collaboration
Version 8.8.15 p25
Collaboration
Version 8.8.15 p26
Collaboration
Version 8.8.15 p27
Collaboration
Version 8.8.15 p28
Collaboration
Version 8.8.15 p29
Collaboration
Version 8.8.15 p2
Collaboration
Version 8.8.15 p30
Collaboration
Version 8.8.15 p31
Collaboration
Version 8.8.15 p32
Collaboration
Version 8.8.15 p33
Collaboration
Version 8.8.15 p34
Collaboration
Version 8.8.15 p35
Collaboration
Version 8.8.15 p37
Collaboration
Version 8.8.15 p3
Collaboration
Version 8.8.15 p4
Collaboration
Version 8.8.15 p5
Collaboration
Version 8.8.15 p6
Collaboration
Version 8.8.15 p7
Collaboration
Version 8.8.15 p8
Collaboration
Version 8.8.15 p9
Collaboration
Version 9.0.0
Collaboration
Version 9.0.0
Collaboration
Version 9.0.0 p0
Collaboration
Version 9.0.0 p10
Collaboration
Version 9.0.0 p11
Collaboration
Version 9.0.0 p12
Collaboration
Version 9.0.0 p13
Collaboration
Version 9.0.0 p14
Collaboration
Version 9.0.0 p15
Collaboration
Version 9.0.0 p16
Collaboration
Version 9.0.0 p19
Collaboration
Version 9.0.0 p1
Collaboration
Version 9.0.0 p20
Collaboration
Version 9.0.0 p21
Collaboration
Version 9.0.0 p23
Collaboration
Version 9.0.0 p24.1
Collaboration
Version 9.0.0 p24
Collaboration
Version 9.0.0 p25
Collaboration
Version 9.0.0 p26
Collaboration
Version 9.0.0 p27
Collaboration
Version 9.0.0 p2
Collaboration
Version 9.0.0 p3
Collaboration
Version 9.0.0 p4
Collaboration
Version 9.0.0 p5
Collaboration
Version 9.0.0 p6
Collaboration
Version 9.0.0 p7.1
Collaboration
Version 9.0.0 p7
Collaboration
Version 9.0.0 p8
Collaboration
Version 9.0.0 p9

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (4)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable

Timeline

No history available yet.