Known CVE

Zimbra Collaboration (ZCS) - Cross Site Scripting

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.

CVE-2022-27926

Medium2022CVSS 6.1CWE-79

cve2022 · zimbra · xss · kev · vkev · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website