CVE-2025-27915 1

Vulnerability (CVE)

CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 07, 2025

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS...

Vulnerabilities & Patching