Skip to content

CVE record · 1 source

CVE-2026-10632

CVSS 8.7

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript…

Vendor: Oracle
Product: java
CVSS: 8.7
EPSS: 0.003 (p23)
Exposure class: Email

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 8d ago

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript…

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript through the packages parameter of the /h/rest document editor. The editor…

CVSS 8.7 CVE-2026-10632 Oracle