Home › Intelligence › Brief
VULNERABILITY BRIEF 🟠 High Vulnerability

[CISA KEV] CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) - Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.

Verisq™ Intelligence · 📅 April 20, 2026 · 📰 nvd.nist.gov
🟠
Severity
High
VU
Type
Vulnerability
📰
Source
nvd.nist.gov

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.

📰 Original Source
https://nvd.nist.gov/vuln/detail/CVE-2025-48700 ↗

This Verisq Intelligence Brief is an independent analysis. Read the original reporting at the link above.

Vulnerability exposure

Is this CVE in your supply chain?

Verisq matches published vulnerabilities against the software your vendors run, so you know which relationships this touches before the next review.

See vendor exposure →