CVE-2022-45911

An issue was discovered in Zimbra Collaboration (ZCS) 9.0

Medium · published January 6, 2023

CVSS v3.1
6.1
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbitrary JavaScript code in the username field. This occurs before the user logs into the system, which means that even if the attacker executes arbitrary JavaScript, they will not get any sensitive information.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Published
2023-01-06T00:00Z
EPSS history
Timeline
  • 06 JAN 00:00Z
    An issue was discovered in Zimbra Collaboration (ZCS) 9.0
    cvelistv5