EXPOSURES › CVE-2023-37580

CVE-2023-37580

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2023-07-27 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-37580 ↗

⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatcheddata-breach

Zimbra Collaboration Suite has an actively exploited XSS vulnerability impacting data integrity and confidentiality.

A cross-site scripting (XSS) vulnerability in Synacor's Zimbra Collaboration Suite is currently being exploited, potentially compromising sensitive data. DIB organizations using Zimbra should immediately patch and review security practices due to the risk of data breaches and compliance violations. This highlights a pattern of chronic vulnerability management failures by Synacor.

Shame score — The ongoing exploitation of a known XSS vulnerability, coupled with Synacor's history of unpatched critical flaws, demonstrates significant negligence in vulnerability management.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Synacor · vendor Zimbra Collaboration Suite (ZCS) · product

DESCRIPTION

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.