Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Aug 17, 2023

CVE-2023-37580

High
EPSS 93.9%CISA KEV
Synacor/Zimbra Collaboration Suite (ZCS)

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.

EPSS — Exploit Probability

93.9%

Higher than 99.9% of all CVEs

Required Action

https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2023-37580

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
93.9%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Jul 27, 2023

Added to KEV

Jul 27, 2023

Remediation Due

Aug 17, 2023

Affected Product

Synacor

Zimbra Collaboration Suite (ZCS)

View all Synacor CVEs