CVE
CVE-2024-45519
- First Reported
- Sep 24, 2026
- Latest Reported
- Sep 24, 2026
CVE Enrichment
- CVSS
- 9.8 CRITICAL
- EPSS
- 99.91%
- EPSS Percentile
- 99.97%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- cve@mitre.org
- Published
- 03-Oct-2024 05:15
- Last Modified
- 17-Jun-2026 14:54
- EPSS Date
- 2026-10-11
- CWE
- CWE-78
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:U /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2024-10-03
- Remediation Due
- 2024-10-24
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Notes
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2024-45519
Affected Products / Versions
- synacor / zimbra_collaboration_suite
Version / affected range: * · before (exclusive) 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: * · from (inclusive) 10.0.0 · before (exclusive) 10.0.9
cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p10:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p12:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p13:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p14:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p15:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p16:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p17:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p18:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p19:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p2:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p21:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p22:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p25:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p27:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p28:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p29:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31.1:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p36:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p37:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p38:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p39:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p4:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p41:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p42:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p43:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p44:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p45:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p7:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p8:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p9:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p12:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p15:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p21:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p29:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p30:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p31:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p32:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p34:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p35:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p36:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p37:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p39:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p40:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 10.1.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.0:*:*:*:*:*:*:*
References
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- CVE-2024-45519, command injection in the postjournal service, unauthenticated command execution. Proofpoint saw attackers stuffing base64 payloads into CC fields on September 28, 2024. CISA added it to KEV on October 3. Zimbra Vulnerabilities Could Let Attackers Manipulate Email, Documents and Calendars
CVE (5)
Vendors (1)
Products (2)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.