VulnSocial

CVE-2023-37580Active Exploitation(synacor / zimbra_collaboration_suite)

MEDIUMCVSS 6.1 · MEDIUMCISA KEV

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch synacor zimbra_collaboration_suite systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.

synacor CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-08-17. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Patch / fix
Other references
Weakness type (CWE)
CWE-79

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zimbra_collaboration_suite

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
synacor
Products
zimbra_collaboration_suite

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-01-30: 1Active Exploitation · 2026-01-30: 1Patch / Workaround · 2026-01-30: 101-30
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • Serge Winters@sergewinters
    Active Exploitation

    4 exploits activos nuevos en el catálogo KEV. Uno es crítico en Zimbra (CVE-2023-37580). Si no parcheas ya, estás jugando con fuego. 🔥⏳ #Ciberseguridad #KEV

    Post summary

    The post alerts that four new active exploits, including CVE-2023-37580 on Zimbra, are listed in the KEV catalog and urges immediate patching.

    00000132
    1.8K followersView on X
CPE platform detail14 entries

14 of 14 entries

PartVendorProductVersionTarget SWTarget HW
Appsynacorzimbra_collaboration_suite---
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--

Explore more

Back to dashboardsynacor CVEszimbra_collaboration_suite vulnerabilities