Zimbra

Records95All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

Zimbra records in CISA KEV

TI-2026-51660 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability CRITICAL 98KEV 2026-08-21 TI-2025-40820 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability CRITICAL 89KEV 2026-03-18 TI-2024-18266 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 86KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Collaboration 41 records CRITICAL Collaboration Server 6 records MEDIUM Zimbra 5 records MEDIUM Zimbra Collaboration Server 2 records MEDIUM Zimbra Collaboration Suite 2 records MEDIUM Collaboration Suite 1 record LOW Zm-ajax 1 record LOW Zm-mailbox 1 record LOW

Records

1 record in Collaboration Suite · all components

TI-2008-01178 CVE-2008-1226 · GHSA-5v2q-43hf-5xvh

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS)…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6, and possibly other versions before 4.5.10 allow remote attackers to inject arbitrary web script or HTML via an e-mail…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2008-03-10 No fix listed CWE-79

Open these records in search →

Critical	10
High	23
Medium	59
Low	3
No CVSS	0