October 3, 2024 · Applied Cybernetics Group
CVE-2024-45519 — Synacor Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
- Added to KEV
2024-10-03- Federal due date
2024-10-24- Vendor
- Synacor
- Product
- Zimbra Collaboration Suite (ZCS)
- EPSS
- 99.9th percentile (score 0.942, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2024-45519
CISA short description
Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.