{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Synacor vulnerabilities","home_page_url":"https://patchfirst.co/vendor/synacor/","feed_url":"https://patchfirst.co/feed/vendor/synacor.json","description":"New and newly exploited Synacor CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-73570#kev","url":"https://patchfirst.co/cve/CVE-2026-73570/","title":"[KEV] CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-08-21. ENISA EUVD lists it as exploited. EPSS 71.7% (higher than 99.42% of CVEs). CVSS 8.9 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.1 of 100.","summary":"Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","date_published":"2026-08-21T00:00:00.000Z","date_modified":"2026-08-24T13:19:17.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.1,"kev":{"dateAdded":"2026-08-21","ransomware":false},"epss":{"score":0.71663,"percentile":0.9942},"cvss":{"score":8.9,"severity":"HIGH","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-48700#kev","url":"https://patchfirst.co/cve/CVE-2025-48700/","title":"[KEV] CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1056 Input Capture; T1059.007 JavaScript. Priority 62.7 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","date_published":"2026-04-20T00:00:00.000Z","date_modified":"2026-06-17T09:30:11.000Z","tags":["kev","T1566.002","T1056","T1059.007"],"_patchfirst":{"reason":"kev","priority":62.7,"kev":{"dateAdded":"2026-04-20","ransomware":false},"epss":{"score":0.01713,"percentile":0.77356},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566.002","T1056","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-66376#kev","url":"https://patchfirst.co/cve/CVE-2025-66376/","title":"[KEV] CVE-2025-66376: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-03-18. ENISA EUVD lists it as exploited. EPSS 20.2% (higher than 97.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.001 Spearphishing Attachment; T1059.007 JavaScript. Priority 66.8 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","date_published":"2026-03-18T00:00:00.000Z","date_modified":"2026-10-07T10:10:00.000Z","tags":["kev","T1566.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2026-03-18","ransomware":false},"epss":{"score":0.20227,"percentile":0.97463},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566.001","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-7796#kev","url":"https://patchfirst.co/cve/CVE-2020-7796/","title":"[KEV] CVE-2020-7796: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 93.6% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 69.8 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","date_published":"2026-02-17T00:00:00.000Z","date_modified":"2026-06-17T03:25:27.000Z","tags":["kev","public-exploit","T1190","T1090"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2026-02-17","ransomware":false},"epss":{"score":0.93592,"percentile":0.99841},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite","techniqueIds":["T1190","T1090"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-68645#kev","url":"https://patchfirst.co/cve/CVE-2025-68645/","title":"[KEV] CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","content_text":"Synacor ·  Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-01-22. ENISA EUVD lists it as exploited. EPSS 48.9% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1005 Data from Local System. Priority 73.9 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","date_published":"2026-01-22T00:00:00.000Z","date_modified":"2026-06-17T09:59:22.000Z","tags":["kev","public-exploit","T1005"],"_patchfirst":{"reason":"kev","priority":73.9,"kev":{"dateAdded":"2026-01-22","ransomware":false},"epss":{"score":0.48873,"percentile":0.98876},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Synacor","product":" Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-27915#kev","url":"https://patchfirst.co/cve/CVE-2025-27915/","title":"[KEV] CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-10-07. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.7% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter. Priority 64.9 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","date_published":"2025-10-07T00:00:00.000Z","date_modified":"2026-06-17T09:04:22.000Z","tags":["kev","public-exploit","T1566","T1059"],"_patchfirst":{"reason":"kev","priority":64.9,"kev":{"dateAdded":"2025-10-07","ransomware":false},"epss":{"score":0.04064,"percentile":0.90652},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-9621#kev","url":"https://patchfirst.co/cve/CVE-2019-9621/","title":"[KEV] CVE-2019-9621: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-07-07. ENISA EUVD lists it as exploited. EPSS 81.0% (higher than 99.63% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 68.2 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","date_published":"2025-07-07T00:00:00.000Z","date_modified":"2026-06-17T02:44:03.000Z","tags":["kev","public-exploit","T1190","T1090"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2025-07-07","ransomware":false},"epss":{"score":0.81037,"percentile":0.99631},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1090"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-27443#kev","url":"https://patchfirst.co/cve/CVE-2024-27443/","title":"[KEV] CVE-2024-27443: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 24.6% (higher than 97.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1566.002 Spearphishing Link; T1059.004 Unix Shell; T1114 Email Collection; T1041 Exfiltration Over C2 Channel. Priority 66.8 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-05-19T00:00:00.000Z","date_modified":"2026-06-17T07:19:54.000Z","tags":["kev","public-exploit","T1566.002","T1059.004","T1114","T1041"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2025-05-19","ransomware":false},"epss":{"score":0.24606,"percentile":0.97881},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566.002","T1059.004","T1114","T1041"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-34192#kev","url":"https://patchfirst.co/cve/CVE-2023-34192/","title":"[KEV] CVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-02-25. ENISA EUVD lists it as exploited. EPSS 77.3% (higher than 99.56% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 69.2 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-02-25T00:00:00.000Z","date_modified":"2026-06-17T06:03:05.000Z","tags":["kev","public-exploit","T1055","T1059","T1185"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2025-02-25","ransomware":false},"epss":{"score":0.77266,"percentile":0.99555},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1055","T1059","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-45519#kev","url":"https://patchfirst.co/cve/CVE-2024-45519/","title":"[KEV] CVE-2024-45519: Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2024-10-03. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","date_published":"2024-10-03T00:00:00.000Z","date_modified":"2026-06-17T07:54:22.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2024-10-03","ransomware":false},"epss":{"score":0.99907,"percentile":0.99967},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-37580","url":"https://patchfirst.co/cve/CVE-2023-37580/","title":"CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-07-27. ENISA EUVD lists it as exploited. EPSS 49.1% (higher than 98.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.0 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-07-31T00:00:00.000Z","date_modified":"2026-06-17T06:08:30.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"published","priority":67,"kev":{"dateAdded":"2023-07-27","ransomware":false},"epss":{"score":0.49083,"percentile":0.98882},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-27926#kev","url":"https://patchfirst.co/cve/CVE-2022-27926/","title":"[KEV] CVE-2022-27926: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-04-03. ENISA EUVD lists it as exploited. EPSS 17.6% (higher than 97.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Named in 1 threat report. Priority 70.6 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-04-03T00:00:00.000Z","date_modified":"2026-06-17T04:37:45.000Z","tags":["kev","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":70.6,"kev":{"dateAdded":"2023-04-03","ransomware":false},"epss":{"score":0.17634,"percentile":0.97146},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1189","T1059.007"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41352#kev","url":"https://patchfirst.co/cve/CVE-2022-41352/","title":"[KEV] CVE-2022-41352: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2022-10-20, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.5% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1505.003 Web Shell. Priority 79.8 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","date_published":"2022-10-20T00:00:00.000Z","date_modified":"2026-09-10T04:17:37.000Z","tags":["kev","ransomware","public-exploit","T1190","T1505.003"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2022-10-20","ransomware":true},"epss":{"score":0.95478,"percentile":0.99869},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1505.003"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-37042","url":"https://patchfirst.co/cve/CVE-2022-37042/","title":"CVE-2022-37042: Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2022-08-11, known ransomware use. ENISA EUVD lists it as exploited. EPSS 92.1% (higher than 99.82% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","date_published":"2022-08-12T00:00:00.000Z","date_modified":"2026-08-04T05:16:29.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"published","priority":79.8,"kev":{"dateAdded":"2022-08-11","ransomware":true},"epss":{"score":0.92072,"percentile":0.9982},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-27925#kev","url":"https://patchfirst.co/cve/CVE-2022-27925/","title":"[KEV] CVE-2022-27925: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2022-08-11, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.7% (higher than 99.92% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.0 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","date_published":"2022-08-11T00:00:00.000Z","date_modified":"2026-10-01T19:17:14.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":78,"kev":{"dateAdded":"2022-08-11","ransomware":true},"epss":{"score":0.98676,"percentile":0.99924},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-27924#kev","url":"https://patchfirst.co/cve/CVE-2022-27924/","title":"[KEV] CVE-2022-27924: Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2022-08-04, known ransomware use. ENISA EUVD lists it as exploited. EPSS 93.9% (higher than 99.84% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 78.2 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","date_published":"2022-08-04T00:00:00.000Z","date_modified":"2026-10-02T14:55:01.000Z","tags":["kev","ransomware","public-exploit","T1190","T1565.001"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2022-08-04","ransomware":true},"epss":{"score":0.93908,"percentile":0.99844},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1565.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-6882#kev","url":"https://patchfirst.co/cve/CVE-2018-6882/","title":"[KEV] CVE-2018-6882: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2022-04-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 29.8% (higher than 98.2% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1566.002 Spearphishing Link; T1059 Command and Scripting Interpreter. Priority 76.9 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2022-04-19T00:00:00.000Z","date_modified":"2026-10-01T20:17:17.000Z","tags":["kev","ransomware","public-exploit","T1566.002","T1059"],"_patchfirst":{"reason":"kev","priority":76.9,"kev":{"dateAdded":"2022-04-19","ransomware":true},"epss":{"score":0.29761,"percentile":0.98196},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566.002","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-24682#kev","url":"https://patchfirst.co/cve/CVE-2022-24682/","title":"[KEV] CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.","summary":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","date_published":"2022-02-25T00:00:00.000Z","date_modified":"2026-08-07T05:16:55.000Z","tags":["kev","ransomware","public-exploit","T1204.001","T1059.007","T1185"],"_patchfirst":{"reason":"kev","priority":76.9,"kev":{"dateAdded":"2022-02-25","ransomware":true},"epss":{"score":0.30931,"percentile":0.98256},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaborate Suite (ZCS)","techniqueIds":["T1204.001","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-9670#kev","url":"https://patchfirst.co/cve/CVE-2019-9670/","title":"[KEV] CVE-2019-9670: Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2022-01-10. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Named in 2 threat reports. Priority 76.0 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","date_published":"2022-01-10T00:00:00.000Z","date_modified":"2026-06-17T02:44:09.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":76,"kev":{"dateAdded":"2022-01-10","ransomware":false},"epss":{"score":0.99986,"percentile":0.99983},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1190","T1005"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":true}}]}