Home › CVE Intelligence › CVE-2025-48700
CVSS 9.5 CRITICAL 🔴 ACTIVELY EXPLOITED Vulnerability

CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to…

⚠️ CISA KEV Remediation Due: 2026-04-23
9.5CVSS Score
CRITICALSeverity
YESCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2025-48700
VendorSynacor
Affected ProductZimbra Collaboration Suite (ZCS)
Vulnerability TypeVulnerability
CVSS Score9.5 (CRITICAL)
Actively Exploited✅ Yes — CISA KEV Listed
Patch StatusSee Vendor Advisory →
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via cisa_kev)

🔬 Technical Analysis

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.

📚 Advisory References

⚡ DETECTION RULES AVAILABLE

Get CVE-2025-48700 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence