{"id":"CVE-2024-45519","aliases":["EUVD-2024-41520","GHSA-fr4c-ch83-r968"],"status":"published","title":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0...","description":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.99907,"percentile":0.99967,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-284","CWE-78","CWE-863"],"published":"2024-10-02T00:00:00Z","modified":"2026-10-28T10:51:18Z","kev":{"date_added":"2024-10-03","due_date":"2024-10-24","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2024-10-03"},{"source":"kev","since":"2024-10-03"}],"exploits":[{"source":"pocgithub","id":"p33d/CVE-2024-45519","title":"p33d/CVE-2024-45519","date":"2024-09-28","url":"https://github.com/p33d/CVE-2024-45519"},{"source":"pocgithub","id":"Chocapikk/CVE-2024-45519","title":"Chocapikk/CVE-2024-45519","date":"2024-10-05","url":"https://github.com/Chocapikk/CVE-2024-45519"},{"source":"pocgithub","id":"sec13b/CVE-2024-45519","title":"sec13b/CVE-2024-45519","date":"2025-03-08","url":"https://github.com/sec13b/CVE-2024-45519"},{"source":"pocgithub","id":"lionels-cyber/CVE-2024-45519-Zimbra-Real-Fix","title":"lionels-cyber/CVE-2024-45519-Zimbra-Real-Fix","date":"2026-08-15","url":"https://github.com/lionels-cyber/CVE-2024-45519-Zimbra-Real-Fix"},{"source":"nuclei","id":"CVE-2024-45519","title":"Zimbra Collaboration Suite \u003c 9.0.0 - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-45519.yaml"}],"products":[{"vendor":"synacor","product":"zimbra collaboration suite (zcs)"},{"vendor":"synacor","product":"zimbra_collaboration_suite"}],"references":[{"url":"https://wiki.zimbra.com/wiki/Security_Center","tags":["Release Notes","web"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy","tags":["Not Applicable","web"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes","tags":["Release Notes","web"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes","tags":["Release Notes","web"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes","tags":["Release Notes","web"]},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes","tags":["Release Notes","web"]},{"url":"https://blog.projectdiscovery.io/zimbra-remote-code-execution/","tags":["exploit","Exploit","evidence"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45519","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45519","tags":["advisory"]},{"url":"https://blog.projectdiscovery.io/zimbra-remote-code-execution"},{"url":"https://github.com/advisories/GHSA-fr4c-ch83-r968"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45519.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-45519","description":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.","status":"published","published":"2024-10-02T00:00:00Z","modified":"2026-02-03T19:27:04.871Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41520","description":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.","status":"published","published":"2024-10-02T00:00:00Z","modified":"2026-02-03T19:27:04Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical"}],"exploited_since":"2024-10-03","updated_at":"2026-11-02T19:48:44.612436Z"}],"ghsa":[{"id":"GHSA-fr4c-ch83-r968","title":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0...","description":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.","status":"published","published":"2024-10-03T00:30:41Z","modified":"2025-10-22T00:33:09Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78","CWE-284","CWE-863"],"updated_at":"2026-11-02T15:04:07.67458Z"}],"kev":[{"id":"CVE-2024-45519","title":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","description":"Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.","cwes":["CWE-284"],"kev":{"date_added":"2024-10-03","due_date":"2024-10-24","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2024-45519","description":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.","status":"published","published":"2024-10-02T22:15:02.77Z","modified":"2026-06-17T07:54:22.36Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:10:30.673028Z"}],"osv":[{"id":"CVE-2024-45519","description":"The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.","status":"published","published":"2024-10-02T00:00:00Z","modified":"2026-11-09T07:05:53.998022586Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical"}],"updated_at":"2026-11-09T03:16:24.800471Z"}]}}