Synacor is a privately owned company headquartered in the US. Founded in 1998, the company employs approximately 210 individuals. Functioning as a cloud-based software and services company, Synacor specializes in providing technology platforms including email and collaboration platforms, and cloud-based identity management. Synacor primarily serves global video, content, entertainment, internet and communications providers, device manufacturers, governments, and enterprises.
Synacor's Zimbra Collaboration Suite (ZCS) contains a critical vulnerability (CVE-2019-9621), classified under CWE-918 and CWE-807, that allows unauthorized requests to internal or external resources, potentially exposing sensitive data and compromising network security. This vulnerability is being actively exploited. The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent warning about this vulnerability on an unspecified date and added it to its Known Exploited Vulnerabilities (KEV) Catalog. CISA also added CVE-2019-9621 to its KEV catalog on an unspecified date, noting it as a Server-Side Request Forgery (SSRF) vulnerability. Multiple vulnerabilities were detected in ZCS on an unspecified date, according to a CISA advisory. Finally, CISA updated its KEV catalog to include a critical zero-day flaw impacting ZCS on an unspecified date in November.
Synacor's customers primarily consist of broadcast television and radio companies. Examples of Synacor's customers include Altitude Sports & Entertainment and ABS-CBN.