← Database

CVE-2022-27926

MEDIUM CVSS: 6.1 Published: 2022-04-21 Modified: 2026-06-17

Description

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.

Affected Platforms

Synacor Zimbra Collaboration Suite

Weakness Type

CWE-79, CWE-79

References