VULNERABILITY INTELLIGENCE

CVE-2024-45519

CVSS score10 CRITICAL
EPSS probability99.91%
CISA KEVKnown exploited vulnerability
Published2024-10-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Vendor / product: Synacor / Zimbra Collaboration Suite (ZCS)

Description

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-78

Primary references