Vendor security team contributor

Zimbra

cited as evidence in 13 of 13 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

wiki.zimbra.com ↗ · home of the cited advisories

records cited in

deterministic count

finder / reporter credits

CVE.org credits

—

CNA assignments

not a CNA

52%

avg modeled exploit prob.

FIRST EPSS, 13/13

ransomware-associated

1 of 13 · CISA flag

Known for

— recomputed from this contributor’s own records

SurfacesApplication / other (13)

WeaknessWeb / client (7), Injection (2), Path traversal / file (1), Authorization / access control (1)

PortfolioSynacor (13)

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out

1Front door

13reach this stage

→

2Keys to the kingdom

13reach this stage

→

3Lateral reach

13reach this stage

→

4Data at risk

3reach this stage

→

5Lights out

2reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 3 of 13 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

Recent highlights

— this contributor’s newest known-exploited records

CVE-2025-48700Synacor2%KEV CVE-2025-66376Synacor12%KEV CVE-2020-7796Synacor85%KEV CVE-2025-68645Synacor32%KEV CVE-2025-27915Synacor4%KEV CVE-2019-9621Synacor81%KEV

Every record they’re cited in

— all 13, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2022-27924Synacor85%RWKEV CVE-2024-45519Synacor100%KEV CVE-2022-41352Synacor95%KEV CVE-2020-7796Synacor85%KEV CVE-2019-9621Synacor81%KEV CVE-2023-34192Synacor77%KEV CVE-2023-37580Synacor59%KEV CVE-2025-68645Synacor32%KEV CVE-2024-27443Synacor20%KEV CVE-2022-27926Synacor17%KEV CVE-2025-66376Synacor12%KEV CVE-2025-27915Synacor4%KEV CVE-2025-48700Synacor2%KEV

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

Cited in 13 known-exploited records — the list below; every one links to its public source.

Coverage gaps — stated, not hidden

This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.

The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.