Over 10,000 #Zimbra servers vulnerable to ongoing #XSS attacks

https://www.bleepingcomputer.com/news/security/cisa-says-zimbra-flaw-now-exploited-over-10k-servers-vulnerable/

#cybersecurity

#Zimbra Mail hat ein XSS Problem. 🔥

"Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw, according to nonprofit security organization Shadowserver."

CVE-2025-48700

"can allow unauthenticated attackers to access sensitive information after executing arbitrary JavaScript within the user's session​​."

"The phishing email has no malicious attachments, no suspicious links, no macros. The entire attack chain lives inside the HTML body of a single email, there are no malicious attachments,"

Updates werden überbewertet, oder? 🔥

"On Friday, Internet security watchdog Shadowserver also warned that over 10,500 Zimbra servers exposed online remain unpatched, most of them in Asia (3,794) and Europe (3,793)."

Warum lernen die Nutzer und Admins nicht dazu? Sind die Schmerzen nicht hoch genug. 🙈

Fragen Sie erfahrene Spezialisten oder einen guten #MSP wie man seine Mail-Server mit Zimbra sicherer betreiben kann. 🙂

https://www.bleepingcomputer.com/news/security/cisa-says-zimbra-flaw-now-exploited-over-10k-servers-vulnerable/

#MSP #Zimbra

Zimbra Servers Targeted in Ongoing XSS Attacks

Beware of sneaky phishing emails that can hijack your Zimbra server with just a glance - no clicks or downloads required. A single malicious email can trigger a cross-site scripting attack, thanks to a recently patched vulnerability, CVE-2025-48700.

https://osintsights.com/zimbra-servers-targeted-in-ongoing-xss-attacks?utm_source=mastodon&utm_medium=social

#CrosssiteScripting #Zimbra #Cve202548700 #XssAttacks #EmailExploits

Le Libre pour l'Éducation populaire et pas que... Votre messagerie et votre cloud souverain, confidentiel et éthique !

https://soyezresolu.org/collaborer/zourit/

#CEMÉA #Zourit #LogicielLibre
#Nexcloud #Zimbra

Zimbra XSS Audit: Signature-based defense is failing. Our latest look at #Zimbra reveals how silent XSS payloads bypass legacy filters. At #TheCyberMindCo, we’re building the Sentinel Alpha on 64-bit NVMe to catch behavioral anomalies in real-time. The blind spot ends here. #CyberSecurity #NCTAG

https://thecybermind.co/2026/03/20/the-zimbra-collaboration-suite/?utm_source=mastodon&utm_medium=jetpack_social