BLACKOUT MAP

Synacor: vulnerabilidades explotadas

AñadidoVulnerabilidadProductoGravedadProb. de ataque
21 ago 2026OS Command InjectionCVE-2026-73570Zimbra Collaboration Suite (ZCS)Alto 8,972%
20 abr 2026Cross-site ScriptingCVE-2025-48700Zimbra Collaboration Suite (ZCS)Media 6,11,7%
18 mar 2026Cross-Site ScriptingCVE-2025-66376Zimbra Collaboration Suite (ZCS)Alto 7,220%
17 feb 2026(ZCS) Server-Side Request ForgeryCVE-2020-7796Zimbra Collaboration SuiteCrítica 9,894%
22 ene 2026Zimbra Collaboration Suite (ZCS) PHP Remote File InclusionCVE-2025-68645 Zimbra Collaboration Suite (ZCS)Alto 8,849%
7 oct 2025Cross-site ScriptingCVE-2025-27915Zimbra Collaboration Suite (ZCS)Media 5,44,1%
7 jul 2025Server-Side Request Forgery (SSRF)CVE-2019-9621Zimbra Collaboration Suite (ZCS)Alto 7,581%
19 may 2025Cross-Site Scripting (XSS)CVE-2024-27443Zimbra Collaboration Suite (ZCS)Media 6,125%
25 feb 2025Cross-Site Scripting (XSS)CVE-2023-34192Zimbra Collaboration Suite (ZCS)Crítica 9,077%
3 oct 2024Command ExecutionCVE-2024-45519Zimbra Collaboration Suite (ZCS)Crítica 10,099,9%
27 jul 2023Cross-Site Scripting (XSS)CVE-2023-37580Zimbra Collaboration Suite (ZCS)Media 6,149%
3 abr 2023Cross-Site Scripting (XSS)CVE-2022-27926Zimbra Collaboration Suite (ZCS)Media 6,118%
20 oct 2022Arbitrary File UploadCVE-2022-41352usado por ransomwareZimbra Collaboration Suite (ZCS)Crítica 9,895%
11 ago 2022Authentication BypassCVE-2022-37042usado por ransomwareZimbra Collaboration Suite (ZCS)Crítica 9,892%
11 ago 2022Arbitrary File UploadCVE-2022-27925usado por ransomwareZimbra Collaboration Suite (ZCS)Alto 7,299%
4 ago 2022Command InjectionCVE-2022-27924usado por ransomwareZimbra Collaboration Suite (ZCS)Crítica 9,894%
19 abr 2022Cross-Site Scripting (XSS)CVE-2018-6882usado por ransomwareZimbra Collaboration Suite (ZCS)Media 6,130%
25 feb 2022Cross-Site ScriptingCVE-2022-24682usado por ransomwareZimbra Collaborate Suite (ZCS)Media 6,131%
10 ene 2022Improper Restriction of XML External Entity ReferenceCVE-2019-9670Zimbra Collaboration Suite (ZCS)Crítica 9,8>99,9%

Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.