CVE-2022-24682

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

6.1
CVSS 3.1
30.9 %
EPSS (current)
2022-02-25
KEV addition
Yes
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Synacor / Zimbra Collaborate Suite (ZCS)

Published: 2022-02-09 · Due (CISA): 2022-03-11

CWE: CWE-116 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
nucleihttp/cves/2022/CVE-2022-24682.yamlZimbra Collaboration Suite < 8.8.15 - Improper Encoding–

References only — no downloads or instructions.

Sources