CVE Watch—

CVE-2023-34192

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVSS

—

Sem CVSS

EPSS

77.3%

p100

KEV

SIM

25 de fev. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

77.3%EPSS · 30 dias77.3%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerabilidade

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Adicionado ao KEV

25 de fev. de 2025

Corrigir até

18 de mar. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2023-34192

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-735708.9 ALT

99.4%

KEV—80Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability74d CVE-2025-663767.2 ALT

97.5%

KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability30d CVE-2022-413529.8 CRÍ

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability57d CVE-2022-370429.8 CRÍ

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability94d CVE-2022-279257.2 ALT

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability35d CVE-2022-279247.5 ALT

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability34d