PULSE
EN VIVO43señales / 24h
FEED
ransomm3rx reclama a suppcentersa.com · ZA · Business Servicesransomm3rx reclama a arambol.co.uk · GB · Not Foundransomincransom reclama a Kyokuto Kaihatsu Kogyo · JP · Manufacturingransomnova reclama a Phi · Not Foundransomnova reclama a Digipro · Technologyransomnova reclama a Integrated Marketing Services · Business Servicesransomkrybit reclama a eitzchaim.com · IL · Not Foundransomkrybit reclama a formasuniversales.com · MX · Business Servicesransomkrybit reclama a rehabmalaysia.com · MY · Healthcareransomkrybit reclama a www.lagus.cz · CZ · Business Servicesransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomm3rx reclama a suppcentersa.com · ZA · Business Servicesransomm3rx reclama a arambol.co.uk · GB · Not Foundransomincransom reclama a Kyokuto Kaihatsu Kogyo · JP · Manufacturingransomnova reclama a Phi · Not Foundransomnova reclama a Digipro · Technologyransomnova reclama a Integrated Marketing Services · Business Servicesransomkrybit reclama a eitzchaim.com · IL · Not Foundransomkrybit reclama a formasuniversales.com · MX · Business Servicesransomkrybit reclama a rehabmalaysia.com · MY · Healthcareransomkrybit reclama a www.lagus.cz · CZ · Business Servicesransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Services
← Todos los CVEs
CVE Watch

CVE-2023-37580

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVSS

Sin CVSS

EPSS

60.0%

p99

KEV

27 jul 2023

Exploit Today

80

0-100

Publicado: · Última mod.:

EPSS · 30d
59.0%EPSS · 30 días60.0%
2026-06-302026-07-16
Ficha del catálogo KEV

Producto

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerabilidad

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Añadido a KEV

27 jul 2023

Remediar antes de

17 ago 2023

Uso conocido en ransomware

No

Descripción resumida

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2023-37580

CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-45519
100.0%
KEV80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
CVE-2019-9670
100.0%
KEV80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVE-2022-27925
99.9%
KEV80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVE-2022-41352
99.9%
KEV80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVE-2022-37042
99.8%
KEV80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
CVE-2022-27924
99.7%
KEV80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability