CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-04-21
Zimbra Collaboration Suite (ZCS) 9.0 Reflected Cross-Site Scripting (XSS) Vulnerability (CVE-2022-27926) Analysis and Mitigation Guide
[Affected Scope] Zimbra Collaboration Suite (ZCS) 9.0.0 versions prior to Patch 24
[Impact] Unauthenticated attackers can execute arbitrary web scripts or HTML in the victim's browser session, potentially hijacking active sessions and accessing sensitive mailboxes
[Mitigation] Immediately upgrade to Zimbra 9.0.0 Patch 24 or later, and apply temporary WAF rules to block access to the vulnerable endpoint