← Back

CVE-2022-45913

nvd nist
Published: Jan 6, 2023Modified: Apr 9, 2025

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure.

Affected (63)

1 product
Collaboration
Configuration A
63 vulnerable
Vulnerable SoftwareAffected Versions
Zimbra
Version 8.8.15
Version 8.8.15 p10
Version 8.8.15 p11
Version 8.8.15 p12
Version 8.8.15 p13
Version 8.8.15 p14
Version 8.8.15 p15
Version 8.8.15 p16
Version 8.8.15 p17
Version 8.8.15 p18
Version 8.8.15 p19
Version 8.8.15 p1
Version 8.8.15 p20
Version 8.8.15 p21
Version 8.8.15 p22
Version 8.8.15 p23
Version 8.8.15 p24
Version 8.8.15 p25
Version 8.8.15 p26
Version 8.8.15 p27
Version 8.8.15 p28
Version 8.8.15 p29
Version 8.8.15 p2
Version 8.8.15 p30
Version 8.8.15 p31
Version 8.8.15 p32
Version 8.8.15 p33
Version 8.8.15 p34
Version 8.8.15 p3
Version 8.8.15 p4
Version 8.8.15 p5
Version 8.8.15 p6
Version 8.8.15 p7
Version 8.8.15 p8
Version 8.8.15 p9
Version 9.0.0
Version 9.0.0 p0
Version 9.0.0 p10
Version 9.0.0 p11
Version 9.0.0 p12
Version 9.0.0 p13
Version 9.0.0 p14
Version 9.0.0 p15
Version 9.0.0 p16
Version 9.0.0 p19
Version 9.0.0 p1
Version 9.0.0 p20
Version 9.0.0 p21
Version 9.0.0 p23
Version 9.0.0 p24.1
Version 9.0.0 p24
Version 9.0.0 p25
Version 9.0.0 p26
Version 9.0.0 p27
Version 9.0.0 p2
Version 9.0.0 p3
Version 9.0.0 p4
Version 9.0.0 p5
Version 9.0.0 p6
Version 9.0.0 p7.1
Version 9.0.0 p7
Version 9.0.0 p8
Version 9.0.0 p9

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.