Intrusion PreventionZimbra.Warning.Dialog.XSS
Description
This indicates an attack attempt against a Cross-Site Scripting (XSS) vulnerability in Zimbra Collaboration.
The vulnerability is caused due to insufficient sanitizing of warning dialog content. It allows remote attackers to launch XSS attack against Zimbra Collaboration users.
Affected Products
Zimbra Collaboration 8.6.0 Patch4 and earlier
Impact
System Compromise: Remote attackers can execute arbitrary script code in the context of the affected user.
Recommended Actions
Apply latest patch from the vendors.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 41483 |
| Created | Oct 13, 2015 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2015-7609 |
| Exploit Prediction Score | 0.18% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |