CISA's list that day
25 February 2025
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Synacor Zimbra Collaboration Suite (ZCS) and Microsoft Partner Center. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2023-34192Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekEPSS 0.77 | 0.77 | ||
| CVE-2024-49035Improper Access Control | Microsoft Partner Center | Patch soon | 0.01 |
Other changes that day
- CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS)Renamed from Zimbra Webmail to Zimbra Collaborate Suite (ZCS). Edited: description and name.