CVE-2022-45913: XSS
Published Jan 6, 2023
·Updated
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure.
Affected Software
63 affected components
Zimbra Collaboration=8.8.15
Zimbra Collaboration=8.8.15-p1
Zimbra Collaboration=8.8.15-p10
Zimbra Collaboration=8.8.15-p11
Zimbra Collaboration=8.8.15-p12
Zimbra Collaboration=8.8.15-p13
Zimbra Collaboration=8.8.15-p14
Zimbra Collaboration=8.8.15-p15
Zimbra Collaboration=8.8.15-p16
Zimbra Collaboration=8.8.15-p17
Zimbra Collaboration=8.8.15-p18
Zimbra Collaboration=8.8.15-p19
Zimbra Collaboration=8.8.15-p2
Zimbra Collaboration=8.8.15-p20
Zimbra Collaboration=8.8.15-p21
Zimbra Collaboration=8.8.15-p22
Zimbra Collaboration=8.8.15-p23
Zimbra Collaboration=8.8.15-p24
Zimbra Collaboration=8.8.15-p25
Zimbra Collaboration=8.8.15-p26
Zimbra Collaboration=8.8.15-p27
Zimbra Collaboration=8.8.15-p28
Zimbra Collaboration=8.8.15-p29
Zimbra Collaboration=8.8.15-p3
Zimbra Collaboration=8.8.15-p30
Zimbra Collaboration=8.8.15-p31
Zimbra Collaboration=8.8.15-p32
Zimbra Collaboration=8.8.15-p33
Zimbra Collaboration=8.8.15-p34
Zimbra Collaboration=8.8.15-p4
Zimbra Collaboration=8.8.15-p5
Zimbra Collaboration=8.8.15-p6
Zimbra Collaboration=8.8.15-p7
Zimbra Collaboration=8.8.15-p8
Zimbra Collaboration=8.8.15-p9
Zimbra Collaboration=9.0.0
Zimbra Collaboration=9.0.0-p0
Zimbra Collaboration=9.0.0-p1
Zimbra Collaboration=9.0.0-p10
Zimbra Collaboration=9.0.0-p11
Zimbra Collaboration=9.0.0-p12
Zimbra Collaboration=9.0.0-p13
Zimbra Collaboration=9.0.0-p14
Zimbra Collaboration=9.0.0-p15
Zimbra Collaboration=9.0.0-p16
Zimbra Collaboration=9.0.0-p19
Zimbra Collaboration=9.0.0-p2
Zimbra Collaboration=9.0.0-p20
Zimbra Collaboration=9.0.0-p21
Zimbra Collaboration=9.0.0-p23
Zimbra Collaboration=9.0.0-p24
Zimbra Collaboration=9.0.0-p24.1
Zimbra Collaboration=9.0.0-p25
Zimbra Collaboration=9.0.0-p26
Zimbra Collaboration=9.0.0-p27
Zimbra Collaboration=9.0.0-p3
Zimbra Collaboration=9.0.0-p4
Zimbra Collaboration=9.0.0-p5
Zimbra Collaboration=9.0.0-p6
Zimbra Collaboration=9.0.0-p7
Zimbra Collaboration=9.0.0-p7.1
Zimbra Collaboration=9.0.0-p8
Zimbra Collaboration=9.0.0-p9
Event History
Jan 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45913?
CVE-2022-45913 is classified as a Cross-Site Scripting (XSS) vulnerability which can lead to information disclosure.
2
How do I fix CVE-2022-45913?
To remediate CVE-2022-45913, upgrade Zimbra Collaboration to the latest patched version that addresses this vulnerability.
3
What versions of Zimbra Collaboration are affected by CVE-2022-45913?
CVE-2022-45913 affects Zimbra Collaboration versions 8.8.15 and 9.0.0.
4
What type of vulnerability is CVE-2022-45913?
CVE-2022-45913 is a Cross-Site Scripting (XSS) vulnerability.
5
What can attackers achieve with CVE-2022-45913?
Attackers can execute arbitrary JavaScript code via malicious webmail URLs, potentially leading to information disclosure.