CVE-2023-37580
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS
—
Sem CVSS
EPSS
49.1%
p99
KEV
SIM
27 de jul. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Synacor / Zimbra Collaboration Suite (ZCS)
Vulnerabilidade
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Adicionado ao KEV
27 de jul. de 2023
Corrigir até
17 de ago. de 2023
Uso conhecido em ransomware
Não
Descrição resumida
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2023-37580