CVE-2018-6882
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.
CISA Known Exploited Vulnerability
Vendor / Product
Synacor — Zimbra Collaboration Suite (ZCS)
Date Added
2022-04-19
Remediation Due
2022-05-10
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2018-6882
Weakness Classification (1)
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| synacor | zimbra_collaboration_suite | < 8.7.0 |
| synacor | zimbra_collaboration_suite | 8.7.0 |
| synacor | zimbra_collaboration_suite | 8.8.0 |
| synacor | zimbra_collaboration_suite | 8.8.1 |
| synacor | zimbra_collaboration_suite | 8.8.2 |
| synacor | zimbra_collaboration_suite | 8.8.3 |
| synacor | zimbra_collaboration_suite | 8.8.4 |
| synacor | zimbra_collaboration_suite | 8.8.5 |
| synacor | zimbra_collaboration_suite | 8.8.6 |
References & Advisories (7)
Vendor Advisory
US Government Resource
Permissions Required
Mailing List
Third Party Advisory
Exploit
Third Party Advisory
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Issue Tracking
Permissions Required