CVE-2016-3407: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3407?
CVE-2016-3407 is considered a medium severity vulnerability due to its nature of allowing cross-site scripting attacks.
How do I fix CVE-2016-3407?
To fix CVE-2016-3407, upgrade to Zimbra Collaboration version 8.7.0 or later.
What are the potential impacts of CVE-2016-3407?
The potential impacts of CVE-2016-3407 include unauthorized access to sensitive information and the ability for attackers to execute scripts in the context of an authenticated user.
Which versions of Zimbra are affected by CVE-2016-3407?
CVE-2016-3407 affects all versions of Zimbra Collaboration before 8.7.0.
Can CVE-2016-3407 be exploited remotely?
Yes, CVE-2016-3407 can be exploited remotely, allowing attackers to inject arbitrary web scripts or HTML.