BLACKOUT MAP

Synacor: vulnerabilità sfruttate

AggiuntoVulnerabilitàProdottoGravitàProbabilità di attacco
21 ago 2026OS Command InjectionCVE-2026-73570Zimbra Collaboration Suite (ZCS)Alta 8,972%
20 apr 2026Cross-site ScriptingCVE-2025-48700Zimbra Collaboration Suite (ZCS)Media 6,11,7%
18 mar 2026Cross-Site ScriptingCVE-2025-66376Zimbra Collaboration Suite (ZCS)Alta 7,220%
17 feb 2026(ZCS) Server-Side Request ForgeryCVE-2020-7796Zimbra Collaboration SuiteCritica 9,894%
22 gen 2026Zimbra Collaboration Suite (ZCS) PHP Remote File InclusionCVE-2025-68645 Zimbra Collaboration Suite (ZCS)Alta 8,849%
7 ott 2025Cross-site ScriptingCVE-2025-27915Zimbra Collaboration Suite (ZCS)Media 5,44,1%
7 lug 2025Server-Side Request Forgery (SSRF)CVE-2019-9621Zimbra Collaboration Suite (ZCS)Alta 7,581%
19 mag 2025Cross-Site Scripting (XSS)CVE-2024-27443Zimbra Collaboration Suite (ZCS)Media 6,125%
25 feb 2025Cross-Site Scripting (XSS)CVE-2023-34192Zimbra Collaboration Suite (ZCS)Critica 9,077%
3 ott 2024Command ExecutionCVE-2024-45519Zimbra Collaboration Suite (ZCS)Critica 10,099,9%
27 lug 2023Cross-Site Scripting (XSS)CVE-2023-37580Zimbra Collaboration Suite (ZCS)Media 6,149%
3 apr 2023Cross-Site Scripting (XSS)CVE-2022-27926Zimbra Collaboration Suite (ZCS)Media 6,118%
20 ott 2022Arbitrary File UploadCVE-2022-41352usata dai ransomwareZimbra Collaboration Suite (ZCS)Critica 9,895%
11 ago 2022Authentication BypassCVE-2022-37042usata dai ransomwareZimbra Collaboration Suite (ZCS)Critica 9,892%
11 ago 2022Arbitrary File UploadCVE-2022-27925usata dai ransomwareZimbra Collaboration Suite (ZCS)Alta 7,299%
4 ago 2022Command InjectionCVE-2022-27924usata dai ransomwareZimbra Collaboration Suite (ZCS)Critica 9,894%
19 apr 2022Cross-Site Scripting (XSS)CVE-2018-6882usata dai ransomwareZimbra Collaboration Suite (ZCS)Media 6,130%
25 feb 2022Cross-Site ScriptingCVE-2022-24682usata dai ransomwareZimbra Collaborate Suite (ZCS)Media 6,131%
10 gen 2022Improper Restriction of XML External Entity ReferenceCVE-2019-9670Zimbra Collaboration Suite (ZCS)Critica 9,8>99,9%

Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.