synacor
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 90 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 23, 2013 to present
90
Total CVEs
32
Critical+High
20
Exploited
29
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
29
Critical/High
Risk Level
40/100
medium
⚠️ 20 Active Exploits⚡ 3 Zero-Days
Severity Distribution
Critical
13High
19Medium
56Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
8Age Distribution
Common Weaknesses (CWE)
1
XSS
42
2
CSRF
6
3
Path Traversal
5
4
XEE
4
5
SSRF
4
Most Affected Products
1. Synacor Zimbra Collaboration Suite1529
2. Zimbra Collaboration118
3. Zimbra Collaboration Server36
4. Zimbra Zimbra Collaboration Suite24
5. Synacor Zimbra Collaboration Suite (ZCS)15
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/cisa-says-zimbra-flaw-now-exploited-over-10k-servers-vulnerable/
unknown
Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
4/24/2026⚠ Exploited🔧 No Patch
CVE-2026-33373
CVSS 8.8high
3/30/2026🔧 No Patch
CVE-2026-33370
CVSS 6.1EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33371
CVSS 4.3EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33369
CVSS 4.3EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33372
CVSS 5.4EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33368
CVSS 6.1EPSS 0%medium
3/20/2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-zimbra-xss-flaw-exploited-in-attacks/
unknown
CISA orders feds to patch Zimbra XSS flaw exploited in attacks
3/18/2026⚠ Exploited🔧 No Patch
CVE-2025-66376
CVSS 7.2high
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
1/5/2026⚠ Exploited🔧 No Patch
CVE-2025-68645
CVSS 8.8high
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
12/22/2025⚠ Exploited🔧 No Patch
Monitor synacor in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.