CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-34192 | Authenticated XSS in Synacor Zimbra Collaboration Suite 8.8.15 Exploited in the Wild | 9.0 | 77% | KEV | KEV |
| CVE-2024-49035 | Unauthenticated Privilege Escalation in Microsoft Partner Center | 9.8 | 1% | KEV | KEV |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Feb 26, 2025 Enterprise Security / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed two security flaws impacting Microsoft Partner Center and Synacor Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.