CVE Database · CVE-2024-45519
CVSS v3.1
10.0
EPSS
99.98%
Published
Oct 2, 2024
Modified
Nov 4, 2025
CISA Known Exploited Vulnerability
Added: 2024-10-03 · Due: 2024-10-24
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Public PoC / Exploit (4)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (92)
References (8)
...and 42 more