Medium · 6.1 Known exploited Scanner template CVE-2023-37580 EUVD-2023-41465GHSA-vw6f-667c-3jv3

Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.

Published Jul 31, 2023 · Updated Oct 30, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting http/cves/2023/CVE-2023-37580.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://wiki.zimbra.com/wiki/Security_Center
https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
[oss-security] 20231117 CVE-2023-37580 (and others): XSS vulnerabilities in Zimbra Collaboration Suite mailing-list

EUVD	v3.1	6.1
CISA-ADP	v3.1	6.1