Cyber threats / Vulnerabilities

CVE-2023-37580

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
49.1%
EPSS
99%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.

Vendor
Synacor
Product
Zimbra Collaboration Suite (ZCS)
Added to KEV
Jul 27, 2023
Remediation due
Aug 17, 2023 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-79
EPSS
49.1% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References