{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-03T12:12:16.445","vulnerabilities":[{"cve":{"id":"CVE-2022-27926","sourceIdentifier":"cve@mitre.org","published":"2022-04-21T00:15:08.450","lastModified":"2026-06-17T04:37:45.020","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) reflejado en el componente /public/launchNewWindow.jsp de Zimbra Collaboration (también se conoce como ZCS) versión 9.0, permite a atacantes no autenticados ejecutar un script web o HTML arbitrario por medio de parámetros de petición"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-29T16:15:58.336126Z","id":"CVE-2022-27926","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-04-03","cisaActionDue":"2023-04-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*","matchCriteriaId":"32AFCE22-5ADA-4FF7-A165-5EC12B325DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*","matchCriteriaId":"D3577FE6-F1F4-4555-8D27-84D6DE731EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:*","matchCriteriaId":"931BD98E-1A5F-4634-945B-BDD7D2FAA8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:*","matchCriteriaId":"2E7C0A57-A887-4D29-B601-4275313F46B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p12:*:*:*:*:*:*","matchCriteriaId":"B7248B91-D136-4DD5-A631-737E4C220A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*","matchCriteriaId":"494F6FD4-36ED-4E40-8336-7F077FA80FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*","matchCriteriaId":"9DF8C0CE-A71D-4BB1-83FB-1EA5ED77E0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p15:*:*:*:*:*:*","matchCriteriaId":"E0648498-2EE5-4B68-8360-ED5914285356"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*","matchCriteriaId":"24282FF8-548B-415B-95CA-1EFD404D21D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*","matchCriteriaId":"ACFDF2D9-ED72-4969-AA3B-E8D48CB1922D"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:*","matchCriteriaId":"2B7D0A8B-7A72-4C1A-85F2-BE336CA47E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*","matchCriteriaId":"019AFC34-289E-4A01-B08B-A5807F7F909A"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:*","matchCriteriaId":"7E7B3976-DA6F-4285-93E6-2328006F7F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*","matchCriteriaId":"062E586F-0E02-45A6-93AD-895048FC2D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p21:*:*:*:*:*:*","matchCriteriaId":"3EE37BEE-4BDB-4E62-8DE3-98CF74DFBE01"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:*","matchCriteriaId":"ADF51BCA-37DD-4642-B201-74A6D1A545FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*","matchCriteriaId":"39611F3D-A898-4C35-8915-3334CDFB78E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*","matchCriteriaId":"FA310AFA-492D-4A6C-A7F6-740E82CB6E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*","matchCriteriaId":"2AF337B5-B296-449B-8848-7636EC7C46C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:*","matchCriteriaId":"52232ACA-C158-48C8-A0DB-7689040CB8FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:*","matchCriteriaId":"3B4D0040-86D0-46C3-8A9A-3DD12138B9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*","matchCriteriaId":"D2BB9BC7-078D-4E08-88E4-9432D74CA9BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:*","matchCriteriaId":"F04D4B77-D386-4BC8-8169-9846693F6F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*","matchCriteriaId":"992370FA-F171-4FB3-9C1C-58AC37038CE4"}]}]}],"references":[{"url":"https://wiki.zimbra.com/wiki/Security_Center","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://wiki.zimbra.com/wiki/Security_Center","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27926","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}