CVE-2022-27926

Synacor's Zimbra Collaboration Suite (ZCS) had an unpatched XSS vulnerability actively exploited in the wild

Synacor's Zimbra Collaboration Suite (ZCS) had an unpatched Cross-Site Scripting (XSS) vulnerability that was actively exploited by threat actors, indicating a systemic failure in vulnerability management and a direct impact on the security of the DIB's communications and data.

Shame score — Chronic vulnerability management failure leading to critical flaws remaining unpatched and actively exploited by threat actors.