CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS)
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to…
- CVSS
- 6.1 Medium
- EPSS
- 1.7%
- Percentile
- 78
- Published
- 2025-06-23
- Force
- 8 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
On CISA’s exploited list
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
- Added
- 2026-04-20
- Federal patch deadline
- 2026-04-23
- Ransomware use
- not known