Lucene search
MitreCVE-2022-41349HistoryOct 12, 2022 - 8:15 p.m.
CVE-2022-41349
2022-10-1220:15:11
CWE-79
mitre
web.nvd.nist.gov
39
2
zimbra
collaboration suite
zcs
8.8.15
/h/compose
reflected xss
vulnerability
cve-2022-41349
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.5%
In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim’s machine.
Affected configurations
Node
zimbracollaborationMatch8.8.15-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zimbra | collaboration | 8.8.15 | cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:* |
Social References
More
Related
osv
osv
CVE-2022-41349
2022-10-12 20:15:11
cvelist
cvelist
CVE-2022-41349
2022-10-12 00:00:00
cnvd
cnvd
prion
prion
Design/Logic Flaw
2022-10-12 20:15:00
nvd
nvd
CVE-2022-41349
2022-10-12 20:15:11
nessus
nessus
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.5%
Related for CVE-2022-41349