Read the docs
TI-2024-18266 Aliases CVE-2024-27443GHSA-qrvg-mg33-q843

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

Priority CRITICAL 86Exploited in the wildCWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-79.

Summary

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.

Why it matters now

Exploitation Active In CISA KEV since 2025-05-19CISA due date 2025-06-09
EPSS 0.24606 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:a:zimbra:collaboration:*:*:*:*:*:*:*:*10.0.0 to before 10.0.7VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*9.0.0VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p0:*:*:*:*:*:*9.0.0 p0VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:*9.0.0 p1VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p10:*:*:*:*:*:*9.0.0 p10VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p11:*:*:*:*:*:*9.0.0 p11VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p12:*:*:*:*:*:*9.0.0 p12VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p13:*:*:*:*:*:*9.0.0 p13VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p14:*:*:*:*:*:*9.0.0 p14VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p15:*:*:*:*:*:*9.0.0 p15VulnerableZimbra
  • cpe:2.3:a:zimbra:collaboration:*:*:*:*:*:*:*:* Versions 10.0.0 to before 10.0.7 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:* Versions 9.0.0 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p0:*:*:*:*:*:* Versions 9.0.0 p0 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:* Versions 9.0.0 p1 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p10:*:*:*:*:*:* Versions 9.0.0 p10 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p11:*:*:*:*:*:* Versions 9.0.0 p11 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p12:*:*:*:*:*:* Versions 9.0.0 p12 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p13:*:*:*:*:*:* Versions 9.0.0 p13 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p14:*:*:*:*:*:* Versions 9.0.0 p14 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p15:*:*:*:*:*:* Versions 9.0.0 p15 Vulnerable ·Zimbra
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zimbra:collaboration:9.0.0:p16:*:*:*:*:*:*9.0.0 p16VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p19:*:*:*:*:*:*9.0.0 p19VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p2:*:*:*:*:*:*9.0.0 p2VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p20:*:*:*:*:*:*9.0.0 p20VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p21:*:*:*:*:*:*9.0.0 p21VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p23:*:*:*:*:*:*9.0.0 p23VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p24:*:*:*:*:*:*9.0.0 p24VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p24.1:*:*:*:*:*:*9.0.0 p24.1VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p25:*:*:*:*:*:*9.0.0 p25VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p26:*:*:*:*:*:*9.0.0 p26VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p27:*:*:*:*:*:*9.0.0 p27VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p3:*:*:*:*:*:*9.0.0 p3VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p30:*:*:*:*:*:*9.0.0 p30VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p31:*:*:*:*:*:*9.0.0 p31VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p32:*:*:*:*:*:*9.0.0 p32VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p33:*:*:*:*:*:*9.0.0 p33VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p34:*:*:*:*:*:*9.0.0 p34VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p35:*:*:*:*:*:*9.0.0 p35VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p36:*:*:*:*:*:*9.0.0 p36VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p37:*:*:*:*:*:*9.0.0 p37VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p38:*:*:*:*:*:*9.0.0 p38VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:*9.0.0 p4VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p5:*:*:*:*:*:*9.0.0 p5VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p6:*:*:*:*:*:*9.0.0 p6VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:*9.0.0 p7VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p7.1:*:*:*:*:*:*9.0.0 p7.1VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p8:*:*:*:*:*:*9.0.0 p8VulnerableZimbra
cpe:2.3:a:zimbra:collaboration:9.0.0:p9:*:*:*:*:*:*9.0.0 p9VulnerableZimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p16:*:*:*:*:*:* Versions 9.0.0 p16 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p19:*:*:*:*:*:* Versions 9.0.0 p19 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p2:*:*:*:*:*:* Versions 9.0.0 p2 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p20:*:*:*:*:*:* Versions 9.0.0 p20 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p21:*:*:*:*:*:* Versions 9.0.0 p21 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p23:*:*:*:*:*:* Versions 9.0.0 p23 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p24:*:*:*:*:*:* Versions 9.0.0 p24 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p24.1:*:*:*:*:*:* Versions 9.0.0 p24.1 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p25:*:*:*:*:*:* Versions 9.0.0 p25 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p26:*:*:*:*:*:* Versions 9.0.0 p26 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p27:*:*:*:*:*:* Versions 9.0.0 p27 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p3:*:*:*:*:*:* Versions 9.0.0 p3 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p30:*:*:*:*:*:* Versions 9.0.0 p30 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p31:*:*:*:*:*:* Versions 9.0.0 p31 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p32:*:*:*:*:*:* Versions 9.0.0 p32 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p33:*:*:*:*:*:* Versions 9.0.0 p33 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p34:*:*:*:*:*:* Versions 9.0.0 p34 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p35:*:*:*:*:*:* Versions 9.0.0 p35 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p36:*:*:*:*:*:* Versions 9.0.0 p36 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p37:*:*:*:*:*:* Versions 9.0.0 p37 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p38:*:*:*:*:*:* Versions 9.0.0 p38 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:* Versions 9.0.0 p4 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p5:*:*:*:*:*:* Versions 9.0.0 p5 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p6:*:*:*:*:*:* Versions 9.0.0 p6 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:* Versions 9.0.0 p7 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p7.1:*:*:*:*:*:* Versions 9.0.0 p7.1 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p8:*:*:*:*:*:* Versions 9.0.0 p8 Vulnerable ·Zimbra
  • cpe:2.3:a:zimbra:collaboration:9.0.0:p9:*:*:*:*:*:* Versions 9.0.0 p9 Vulnerable ·Zimbra

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2025-05-19 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2024-27443
  3. 2026-10-03 Alias added: GHSA-qrvg-mg33-q843

References

Other 2

  • TI-2024-30554 The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before… KEVCVSS 3.1CRITICAL 10.0
  • TI-2022-19841 An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-17239 Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that… KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-10792 Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-06312 Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is… KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-07076 mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an… KEVCVSS 3.1CRITICAL 9.8
See all 105 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences