CVE Watch—

CVE-2024-45519

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

99.9%

p100

KEV

SÍ

3 oct 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 días99.9%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerabilidad

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Añadido a KEV

3 oct 2024

Remediar antes de

24 oct 2024

Uso conocido en ransomware

Descripción resumida

Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2024-45519

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-735708.9 ALT

97.3%

KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7d CVE-2022-370429.8 CRÍ

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability27d CVE-2022-279257.2 ALT

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27d CVE-2022-279247.5 ALT

99.7%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability27d CVE-2018-68826.1 MED

97.8%

KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability18d CVE-2019-9670—

100.0%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference—