{"cve":"CVE-2018-14013","epss":{"score":0.07436},"mitre":{"cpes":[],"created":"2019-05-29T21:24:02+00:00","description":"Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2018/14xxx/CVE-2018-14013.json","references":["http://packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2019/Feb/3","http://www.openwall.com/lists/oss-security/2019/01/30/1","http://www.securityfocus.com/bid/106787","https://bugzilla.zimbra.com/show_bug.cgi?id=109017","https://bugzilla.zimbra.com/show_bug.cgi?id=109018","https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories"],"title":null,"updated":"2024-08-05T09:21:40.762000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p8:*:*:*:*:*:*"],"created":"2019-05-29T22:29:00.883000+00:00","description":"Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.","metrics":{"cvssV2_0":{"score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cvssV3_0":{"score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2018/CVE-2018-14013.json","references":["http://packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2019/Feb/3","http://www.openwall.com/lists/oss-security/2019/01/30/1","http://www.securityfocus.com/bid/106787","https://bugzilla.zimbra.com/show_bug.cgi?id=109017","https://bugzilla.zimbra.com/show_bug.cgi?id=109018","https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories"],"title":null,"updated":"2026-06-17T01:40:29.227000+00:00","vendors":["synacor","synacor$PRODUCT$zimbra_collaboration_suite"],"weaknesses":["CWE-79"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p8:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2019-05-29T21:24:02+00:00","provider":"mitre"},"description":{"data":"Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"provider":"nvd"},"cvssV3_0":{"data":{"score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.07436},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2019/Feb/3","http://www.openwall.com/lists/oss-security/2019/01/30/1","http://www.securityfocus.com/bid/106787","https://bugzilla.zimbra.com/show_bug.cgi?id=109017","https://bugzilla.zimbra.com/show_bug.cgi?id=109018","https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T03:48:26.807000+00:00","provider":"nvd"},"vendors":{"data":["synacor","synacor$PRODUCT$zimbra_collaboration_suite"],"providers":["nvd"]},"weaknesses":{"data":["CWE-79"],"providers":["nvd"]}}}