Security Advisory

CVE-2022-27926

6.1
MEDIUM

Vulnerability Description

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.
Published Date April 21, 2022
Official Source NIST NVD Advisory