Synacor
19 CVEs in CISA KEV — 6 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-45519 |
Zimbra Collaboration Suite (ZCS) | — | 0.9991 | 2024-10-03 | 2024-10-24 | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability i | |
CVE-2022-27925 |
Zimbra Collaboration Suite (ZCS) | — | 0.9868 | 2022-08-11 | 2022-09-01 | RW | Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functio |
CVE-2022-41352 |
Zimbra Collaboration Suite (ZCS) | — | 0.9548 | 2022-10-20 | 2022-11-10 | RW | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary |
CVE-2022-27924 |
Zimbra Collaboration Suite (ZCS) | — | 0.9391 | 2022-08-04 | 2022-08-25 | RW | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache c |
CVE-2022-37042 |
Zimbra Collaboration Suite (ZCS) | — | 0.9207 | 2022-08-11 | 2022-09-01 | RW | Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulne |
CVE-2023-34192 |
Zimbra Collaboration Suite (ZCS) | — | 0.7727 | 2025-02-25 | 2025-03-18 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) v | |
CVE-2026-73570 |
Zimbra Collaboration Suite (ZCS) | — | 0.7166 | 2026-08-21 | 2026-08-24 | Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability | |
CVE-2023-37580 |
Zimbra Collaboration Suite (ZCS) | — | 0.4908 | 2023-07-27 | 2023-08-17 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnera | |
CVE-2025-68645 |
Zimbra Collaboration Suite (ZCS) | — | 0.4887 | 2026-01-22 | 2026-02-12 | Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vu | |
CVE-2024-27443 |
Zimbra Collaboration Suite (ZCS) | — | 0.2461 | 2025-05-19 | 2025-06-09 | Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the | |
CVE-2025-66376 |
Zimbra Collaboration Suite (ZCS) | — | 0.2023 | 2026-03-18 | 2026-04-01 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnera | |
CVE-2022-27926 |
Zimbra Collaboration Suite (ZCS) | — | 0.1763 | 2023-04-03 | 2023-04-24 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnera | |
CVE-2025-27915 |
Zimbra Collaboration Suite (ZCS) | — | 0.0406 | 2025-10-07 | 2025-10-28 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnera | |
CVE-2025-48700 |
Zimbra Collaboration Suite (ZCS) | — | 0.0171 | 2026-04-20 | 2026-04-23 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnera | |
CVE-2020-7796 |
Zimbra Collaboration Suite | — | — | 2026-02-17 | 2026-03-10 | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery | |
CVE-2019-9621 |
Zimbra Collaboration Suite (ZCS) | — | — | 2025-07-07 | 2025-07-28 | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery | |
CVE-2018-6882 |
Zimbra Collaboration Suite (ZCS) | — | — | 2022-04-19 | 2022-05-10 | RW | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnera |
CVE-2022-24682 |
Zimbra Collaborate Suite (ZCS) | — | — | 2022-02-25 | 2022-03-11 | RW | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) v |
CVE-2019-9670 |
Zimbra Collaboration Suite (ZCS) | — | — | 2022-01-10 | 2022-07-10 | Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML |