{"cvss":6.1,"datePublished":"2022-02-25","dateUpdated":"2022-02-25","description":"Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.","dueDate":"2022-03-11","id":"CVE-2022-24682","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-24682","product":"Zimbra Collaborate Suite (ZCS)","requiredAction":"Apply updates per vendor instructions.","severity":"MEDIUM","source":"cisa_known_exploited","title":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","vendor":"Synacor"}