H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2026-04-20
Last seen2026-04-20

Confidence

—

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.

Labels

exploitedkev

CISA KEV context

Vendor / productSynacor Zimbra Collaboration Suite (ZCS)
Added2026-04-20
Due date2026-04-23
7 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2025-48700
open
cwe
CWE-79
open