CVE-2019-8947: XSS
First published: Mon Jan 27 2020(Updated: )
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zimbra Collaboration Server | >=8.7.0<=8.8.11 | |
| Zimbra Collaboration Server | =8.8.11-p1 | |
| Zimbra Collaboration Server | =8.8.11-p2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-8947?
The severity of CVE-2019-8947 is medium.
What is the affected software for CVE-2019-8947?
The affected software for CVE-2019-8947 is Zimbra Collaboration Server 8.7.x - 8.8.11P2.
How does CVE-2019-8947 affect Zimbra Collaboration Server?
CVE-2019-8947 allows for non-persistent XSS attacks on Zimbra Collaboration Server 8.7.x - 8.8.11P2.
How can the XSS vulnerability in Zimbra Collaboration Server be fixed?
To fix the XSS vulnerability in Zimbra Collaboration Server, it is recommended to update to a version that is not affected, such as 8.8.11-p3 or later.
Where can I find more information about CVE-2019-8947?
You can find more information about CVE-2019-8947 on the Zimbra Bugzilla website using the following links: [link1], [link2], [link3].
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/zimbra
- canonical/zimbra collaboration server
- version/zimbra collaboration server/8.7.0
- version/zimbra collaboration server/8.8.11
- version/zimbra collaboration server/8.8.11-p1
- version/zimbra collaboration server/8.8.11-p2