Is CVE-2022-24682 actively exploited?

Yes. CVE-2022-24682 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2022-24682 be exploited remotely?

The attack vector of CVE-2022-24682 has not been classified yet.

What is the CVSS score of CVE-2022-24682?

CVE-2022-24682 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2022-24682

HIGHCISA KEVIN THE WILD

CVE-2022-24682

Published: February 25, 2022

EPSS:87.97%probability of exploitation in 30 daysPercentile:99.5th

Official Description

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

NVD Source

CISA KEV Advisory

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

Added to KEV: 2022-02-25Federal patch deadline: 2022-03-11⚠ USED IN RANSOMWARE CAMPAIGNS

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

Synacor Zimbra Collaboration Suite (ZCS) has a cross-site scripting (XSS) vulnerability in its Calendar feature that allows for arbitrary code execution. The very high EPSS score of 0.87968 indicates a strong likelihood of exploitation, and its inclusion in CISA's KEV confirms active exploitation. This makes it an urgent concern for organizations using Zimbra.

Active exploitation of this vulnerability has been observed in the wild. As an XSS vulnerability, it is remotely exploitable, likely through malicious calendar entries or shared content.

Recommended Action

Update Synacor Zimbra Collaboration Suite (ZCS) to the latest patched version. Ensure all web applications, especially those with user-generated content, properly sanitize input to prevent XSS attacks.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2022-24682 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2022-24682 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.