- How many CVEs does Synacor have?
- Synacor has 89 published CVE records since 2013, including 14 in the last two years.
- How many Synacor CVEs are in CISA KEV?
- Yes — 17 of Synacor's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Synacor products have the most CVEs?
- The Synacor products with the most published CVEs are zimbra_collaboration_suite, zimbra collaboration server, Zimbra Collaboration Suite 8.7.x, Zimbra Collaboration Suite (ZCS), Zimbra Server.
- What are the most common weakness types in Synacor CVEs?
- Synacor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-352 (Cross-Site Request Forgery (CSRF)).
- Are there public exploits for Synacor vulnerabilities?
- Yes — 23 of Synacor's CVEs have a known public exploit.
- How many critical Synacor vulnerabilities are there?
- Synacor has 15 critical and 20 high-severity CVEs.
- What is the average severity of Synacor CVEs?
- The average CVSS base score across Synacor's scored CVEs is 7.0.