Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12427.json"