← Back to browse · API

CVE-2022-27926

Severity
MEDIUM
CVSS
6.1
EPSS
0.17634
Risk score
55.57
CISA KEV
Yes
PoC
No
Published
2023-04-03
Modified
2023-04-03
First seen
2026-08-07
Aliases
EUVD-2022-32414, GHSA-CHC6-9436-6WFQ
Products
Synacor:Zimbra Collaboration Suite (ZCS), n/a:n/a n/a
Sources
euvd EUVD-2022-32414
cisa.gov CVE-2022-27926

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.

References