Intrusion PreventionZimbra.Collaboration.Error.Code.XSS
Description
This indicates an attack attempt to exploit a Cross-Site Scripting Vulnerability in Zimbra Collaboration.
This vulnerability is due to insufficient input validation. A remote, unauthenticated attacker could exploit this vulnerability by enticing the target user to click on a crafted link. Successful exploitation could result in execution of script code in the security context of the target user's browser.
Affected Products
Zimbra Collaboration 9.0.0 before Patch 24
Impact
System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 54854 |
| Created | Mar 07, 2024 |
| Updated | Mar 18, 2024 |
| Risk |
|
| CVE ID | CVE-2022-27926 |
| Known Exploited | Yes |
| Exploit Prediction Score | 96.15% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |