{"cve":"CVE-2023-37580","epss":{"score":0.49083},"kev":{"dateAdded":"2023-07-27T00:00:00+00:00","dueDate":"2023-08-17T00:00:00+00:00"},"mitre":{"cpes":[],"created":"2023-07-31T00:00:00+00:00","description":"Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2023/37xxx/CVE-2023-37580.json","references":["http://www.openwall.com/lists/oss-security/2023/11/17/2","https://wiki.zimbra.com/wiki/Security_Center","https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy"],"title":null,"updated":"2025-10-30T18:26:19.400000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p37:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p38:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*"],"created":"2023-07-31T16:15:10.327000+00:00","description":"Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2023/CVE-2023-37580.json","references":["http://www.openwall.com/lists/oss-security/2023/11/17/2","https://wiki.zimbra.com/wiki/Security_Center","https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580"],"title":null,"updated":"2026-06-17T06:08:30.210000+00:00","vendors":["synacor","synacor$PRODUCT$zimbra_collaboration_suite"],"weaknesses":["CWE-79"]},"opencve":{"changes":[{"created":"2024-10-18T21:15:00+00:00","data":[{"details":{"added":{"kev":{"dateAdded":"2023-07-27"},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"f1970fe7-ba75-4053-821f-436347fd7a27"},{"created":"2025-01-27T23:15:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"ssvc":{"new":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"partial"},"version":"2.0.3"},"old":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}}}},"type":"metrics"}],"id":"e3301949-c356-40b9-a626-4db7269db286"},{"created":"2025-10-21T19:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580"],"removed":[]},"type":"references"}],"id":"40a5b5f0-b124-445f-ae42-1121f4e04a3d"},{"created":"2025-10-21T20:30:00+00:00","data":[{"details":{"added":[],"removed":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580"]},"type":"references"}],"id":"2f655330-91f0-498c-acc8-d75a96f4fddb"},{"created":"2025-10-21T23:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580"],"removed":[]},"type":"references"}],"id":"6d073b2c-dab5-401e-941b-5986cd653085"},{"created":"2025-10-27T14:45:00+00:00","data":[{"details":["synacor","synacor$PRODUCT$zimbra_collaboration_suite"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p37:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p38:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*"],"removed":["cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p11:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p26:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p30:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p31:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p32:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p33:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p34:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p35:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p37:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p38:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p3:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p40:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p5:*:*:*:*:*:*"]},"type":"cpes"},{"details":{"added":["synacor","synacor$PRODUCT$zimbra_collaboration_suite"],"removed":["zimbra","zimbra$PRODUCT$zimbra"]},"type":"vendors"}],"id":"b2ac4c3d-1d89-4c96-b416-c0a29263d437"}],"cpes":{"data":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p37:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p38:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2023-07-31T00:00:00+00:00","provider":"mitre"},"description":{"data":"Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"provider":"vulnrichment"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.49083},"provider":"first"},"kev":{"data":{"dateAdded":"2023-07-27T00:00:00+00:00","dueDate":"2023-08-17T00:00:00+00:00"},"provider":"cisa"},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://www.openwall.com/lists/oss-security/2023/11/17/2","https://wiki.zimbra.com/wiki/Security_Center","https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-10-31T14:43:05.200000+00:00","provider":"nvd"},"vendors":{"data":["synacor","synacor$PRODUCT$zimbra_collaboration_suite"],"providers":["nvd"]},"weaknesses":{"data":["CWE-79"],"providers":["nvd","vulnrichment"]}},"vulnrichment":{"cpes":[],"created":"2023-07-31T00:00:00+00:00","description":"Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cvssV4_0":{},"kev":{"dateAdded":"2023-07-27"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"partial"},"version":"2.0.3"}},"references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-37580"],"title":null,"updated":"2024-10-18T20:32:26.403000+00:00","vendors":[],"vulnrichment_repo_path":"2023/37xxx/CVE-2023-37580.json","weaknesses":["CWE-79"]}}