Vulnerabilità sfruttate

Synacor

19 vulnerabilità di Synacor nel catalogo KEV della CISA: quelle per cui l'agenzia statunitense per la sicurezza informatica ha prove di sfruttamento in attacchi reali.

Nel catalogo19
Ultimi 12 mesi5
In campagne ransomware6
Ultima aggiunta21 agosto 2026

Le vulnerabilità19

  1. 21 agosto 2026CVE-2026-73570Zimbra Collaboration Suite (ZCS)Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
  2. 20 aprile 2026CVE-2025-48700Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
  3. 18 marzo 2026CVE-2025-66376Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
  4. 17 febbraio 2026CVE-2020-7796Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
  5. 22 gennaio 2026CVE-2025-68645 Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
  6. 7 ottobre 2025CVE-2025-27915Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
  7. 7 luglio 2025CVE-2019-9621Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
  8. 19 maggio 2025CVE-2024-27443Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  9. 25 febbraio 2025CVE-2023-34192Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  10. 3 ottobre 2024CVE-2024-45519Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
  11. 27 luglio 2023CVE-2023-37580Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  12. 3 aprile 2023CVE-2022-27926Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  13. 20 ottobre 2022CVE-2022-41352Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityRansomware
  14. 11 agosto 2022CVE-2022-37042Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityRansomware
  15. 11 agosto 2022CVE-2022-27925Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityRansomware
  16. 4 agosto 2022CVE-2022-27924Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityRansomware
  17. 19 aprile 2022CVE-2018-6882Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityRansomware
  18. 25 febbraio 2022CVE-2022-24682Zimbra Collaborate Suite (ZCS)Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityRansomware
  19. 10 gennaio 2022CVE-2019-9670Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Dati: catalogo Known Exploited Vulnerabilities (KEV) della CISA, ultima aggiunta il 4 novembre 2026.
Il catalogo elenca solo le vulnerabilità con prove di sfruttamento, non tutte quelle del produttore.

Avvisi solo sui prodotti che usi

Con My Defence ricevi avvisi e briefing solo sui prodotti che usi, anche di Synacor.

Tutti i produttoriIl catalogo sul sito della CISA