CVE Watch—

CVE-2024-45519

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

99.9%

p100

KEV

SÍ

3 oct 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 días99.9%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerabilidad

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Añadido a KEV

3 oct 2024

Remediar antes de

24 oct 2024

Uso conocido en ransomware

Descripción resumida

Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2024-45519

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-735708.9 ALT

99.4%

KEV—80Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability52d CVE-2025-663767.2 ALT

97.4%

KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability8d CVE-2022-413529.8 CRÍ

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability35d CVE-2022-370429.8 CRÍ

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability72d CVE-2022-279257.2 ALT

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability13d CVE-2022-279247.5 ALT

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability13d