CVE-2023-37580
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: July 14, 2026
4 articles
EPSS Score
Source: FIRST.org · 2026-05-24
93.92%
probability
This CVE has a 93.92% probability
of being exploited in the next 30 days.
0%
Top 99.9th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroReflected XSS in /m/moveto
Attack Intelligence
Google Project Zero
Discovered
June 29, 2023
Patched
July 26, 2023
Reported by
Clement Lecigne of the Google Threat Analysis Group
Root Cause Analysis
???
Google: Hackers exploited Zimbra zero-day in attacks on govt orgs
BleepingComputer
Nov 17, 2023
[MàJ] Vulnérabilité dans Zimbra Collaboration Suite (17 juillet 2023)
CERT-FR
Jul 17, 2023
Signal Intelligence
Confidence
95%
EPSS
93.92%
Mentions
4
Last Seen
Nov 17, 2023
CNA Information
Analyst Note
Auto-confirmed: présent dans Google Project Zero
Triage Info
Decided atJul 14, 2026