CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation




The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed two security flaws impacting Microsoft Partner Center and Synacor Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerabilities in question are as follows –

CVE-2024-49035 (CVSS score: 8.7) – An improper access control



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *