CVE-2024-45519

10.0 CRITICAL CISA KEV - Actively Exploited

Published: October 02, 2024 Modified: November 04, 2025

Description

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://wiki.zimbra.com/wiki/Security_Center

Source: cve@mitre.org

Release Notes

https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes

Source: cve@mitre.org

Release Notes

https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes

Source: cve@mitre.org

Release Notes

https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes

Source: cve@mitre.org

Release Notes

https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes

Source: cve@mitre.org

Release Notes

https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy

Source: cve@mitre.org

Not Applicable

https://blog.projectdiscovery.io/zimbra-remote-code-execution/

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Exploit

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45519

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

10.0 / 10.0

EPSS (Exploit Probability)

94.1%

100th percentile

Exploitation Status

Actively Exploited

Remediation due: 2024-10-24

Weaknesses (CWE)

CWE-78

Affected Vendors

synacor

Related CVEs