Detections
Analytics

Zimbra Collaboration Server 9.x < 9.0.0 Patch 39, 10.0.x < 10.0.13, 10.1.x < 10.1.5 XSS

medium Nessus Plugin ID 269804

Synopsis

The remote web server contains a web application that is affected by a cross site scripting vulnerability.

Description

According to its self-reported version number, Zimbra Collaboration Server is affected by the following vulnerability including:A stored cross-site scripting (XSS) vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML. Using a specifically crafted email, a attacker can run embedded JavaScript to run arbitrary JavaScript within the victim's session, performing unauthorized actions on the victim's account, including e-mail redirection, data exfiltration, or malware installation.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to version 9.0.0 Patch 4, 10.0.13, 10.1.5, or later.

See Also

https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P44

https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.13

https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.5

https://wiki.zimbra.com/wiki/Security_Center

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

Plugin Details

Severity: Medium

ID: 269804

File Name: zimbra_10_1_5.nasl

Version: 1.1

Type: combined

Agent: unix

Family: CGI abuses

Published: 10/9/2025

Updated: 10/9/2025

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.7

CVSS v2

Risk Factor: Medium

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS Score Source: CVE-2025-27915

CVSS v3

Risk Factor: Medium

Base Score: 5.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS Score Source: CVE-2025-27915

Vulnerability Information

CPE: cpe:/a:zimbra:collaboration_suite

Required KB Items: installed_sw/zimbra_zcs

Patch Publication Date: 3/12/2025

Vulnerability Publication Date: 3/12/2025

CISA Known Exploited Vulnerability Due Dates: 10/6/2025

Reference Information

CVE: CVE-2025-27915

IAVA: 2025-A-0735