CVE-2023-37580
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Published Jul 27, 2023 · updated Jun 16, 2026 · synacor zimbra collaboration suite
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
Timeline
Detection, updates, and resolution for this record.
Jul 27, 2023 · Catalog
Detected
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
Jul 27, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Aug 17, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Aug 17, 2023
Affected
- cpe synacor/zimbra collaboration suiteversion unspecified
- cpe synacor/zimbra collaboration suite8.8.15
- vendor Synacor Zimbra Collaboration Suite (ZCS)version unspecified
Sources
- CISA KEVCVE-2023-37580
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
cisa.gov - CVE.orgCVE-2023-37580
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-37580
30-day exploitation probability 49.1%
first.org - NIST NVDCVE-2023-37580
Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.
nvd.nist.gov