Zimbra

Records95All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

Zimbra records in CISA KEV

TI-2026-51660 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability CRITICAL 98KEV 2026-08-21 TI-2025-40820 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability CRITICAL 89KEV 2026-03-18 TI-2024-18266 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 86KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Collaboration 41 records CRITICAL Collaboration Server 6 records MEDIUM Zimbra 5 records MEDIUM Zimbra Collaboration Server 2 records MEDIUM Zimbra Collaboration Suite 2 records MEDIUM Collaboration Suite 1 record LOW Zm-ajax 1 record LOW Zm-mailbox 1 record LOW

Records

6 records in Collaboration Server · all components

TI-2013-05894 CVE-2013-7217 · GHSA-cx3x-82j4-jc5x

Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x…

MEDIUM 48

Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified vectors, a different vulnerability than CVE-2013-7091.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02954 Published 2013-12-26 No fix listed

TI-2019-06457 CVE-2019-8947 · GHSA-wrwc-vgm8-jp23

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.

LOW 30

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01413 Published 2020-01-27 No fix listed CWE-79

TI-2019-06456 CVE-2019-8946 · GHSA-4vf5-wq63-5f76

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.

LOW 30

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01413 Published 2020-01-27 No fix listed CWE-79

TI-2019-06455 CVE-2019-8945 · GHSA-2fc8-2w75-6pjh

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.

LOW 30

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01413 Published 2020-01-27 No fix listed CWE-79

TI-2019-11417 CVE-2019-15313 · GHSA-p5ph-6r6q-v52v

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.

LOW 29

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00973 Published 2020-01-27 No fix listed CWE-79

TI-2019-09271 CVE-2019-12427 · GHSA-jmcq-qgf4-cr92

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.

LOW 24

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01036 Published 2020-01-27 No fix listed CWE-79

Open these records in search →

Critical	10
High	23
Medium	59
Low	3
No CVSS	0