CVE-2023-38750

moderate-risk

Published 2023-07-31

In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.

Do I need to act?

0.29% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Zimbra

Zimbra

Release Notes https://wiki.zimbra.com/wiki/Security_Center

Not Applicable https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

Release Notes https://wiki.zimbra.com/wiki/Security_Center

Not Applicable https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 22/34 · High