Unrated severityNVD Advisory· Published Oct 12, 2022· Updated May 15, 2025

CVE-2022-41349

Description

In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zimbra/Collaboration Servercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =8.8.15

Patches

Vulnerability mechanics

References

wiki.zimbra.com/wiki/Security_Centermitre
wiki.zimbra.com/wiki/Zimbra_Security_Advisoriesmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000