CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation [email protected] (The Hacker News)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed two security flaws impacting Microsoft Partner Center and Synacor Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerabilities in question are as follows –

CVE-2024-49035 (CVSS score: 8.7) – An improper access controlRead More