{"cvss":6.1,"datePublished":"2023-04-03","dateUpdated":"2023-04-03","description":"Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.","dueDate":"2023-04-24","id":"CVE-2022-27926","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://wiki.zimbra.com/wiki/Security_Center;  https://nvd.nist.gov/vuln/detail/CVE-2022-27926","product":"Zimbra Collaboration Suite (ZCS)","requiredAction":"Apply updates per vendor instructions.","severity":"MEDIUM","source":"cisa_known_exploited","title":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","vendor":"Synacor"}