CISA known exploited vulnerability

CVE-2022-27926

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

SOURCE FACT

Synacor · Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.

Required action

Apply updates per vendor instructions.

CISA notes

https://wiki.zimbra.com/wiki/Security_Center; https://nvd.nist.gov/vuln/detail/CVE-2022-27926

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2022-27926

Synacor · Zimbra Collaboration Suite (ZCS)

Required action

CISA notes

Could this product be present?