Feb 25, 2025

Started

• ClosedCritical✓Patched

  Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

  Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. Added to CISA KEV on 2025-02-25.

  Synacor Zimbra Collaboration Suite (ZCS)·Closed Feb 25, 2025·updated Feb 25, 2025

• ClosedHigh✓Patched

  Microsoft Partner Center: Partner Center Improper Access Control Vulnerability

  Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges. Added to CISA KEV on 2025-02-25.

  Microsoft Partner Center·Closed Feb 25, 2025·updated Feb 25, 2025