CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event…
- CVSS
- not scored
On CISA’s exploited list
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
- Added
- 2025-10-07
- Federal patch deadline
- 2025-10-28
- Ransomware use
- not known