Enterprise software systems are vulnerable to authentication bypass and Cross-Site Scripting (XSS) attacks, which can lead to unauthorized access and data breaches.

Cybersecurity Technology ConflictApr 21, 2026score 0.172 posts · 0 replies across 1 instances

The thread discusses two cybersecurity vulnerabilities: one in KACE Systems Management Appliance (SMA) allowing authentication bypass and another in Zimbra Collaboration software enabling Cross-Site Scripting (XSS) attacks. These vulnerabilities highlight potential security risks in enterprise software systems.

Claims

Parent: CybersecurityEntity: Enterprise software systemsImpact: negativeDate: Apr 21, 2026Target: Enterprise software systems' security

Source posts

@[email protected]

🚨 EUVD-2025-18891

📊 Score: 6.1/10 (CVSS v3.1)
📅 Published: 2025-06-23 | Updated: 2026-04-21

📝 An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized acc...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18891

#cybersecurity #infosec #euvd #cve #vulnerability

0 boosts · 0 favs · 0 replies · Apr 21, 2026

#cybersecurity#infosec#euvd#cve#vulnerability

@[email protected]

🚨 EUVD-2025-19028

📊 Score: 10.0/10 (CVSS v3.1)
📅 Published: 2025-06-24 | Updated: 2026-04-21

📝 Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersona...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19028

#cybersecurity #infosec #euvd #cve #vulnerability

0 boosts · 0 favs · 0 replies · Apr 21, 2026

#cybersecurity#infosec#euvd#cve#vulnerability