CVE

CVE-2023-37580

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)

Date added (CISA)

2023-07-27

Remediation due

2023-08-17

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.