CVE Watch—

CVE-2024-45519

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

CVSS

—

No CVSS

EPSS

99.9%

p100

KEV

YES

Oct 3, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.9%EPSS · 30 days99.9%

2026-08-022026-08-30

KEV catalog record

Product

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Added to KEV

Oct 3, 2024

Remediate by

Oct 24, 2024

Known ransomware use

Summary description

Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2024-45519

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-735708.9 HIG

97.3%

KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7d CVE-2022-370429.8 CRI

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability27d CVE-2022-279257.2 HIG

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27d CVE-2022-279247.5 HIG

99.7%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability27d CVE-2018-68826.1 MED

97.8%

KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability18d CVE-2019-9670—

100.0%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference—