Read the docs

Zimbra

Records95All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

Zimbra records in CISA KEV
TI-2026-51660 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Priority CRITICAL 98KEV 2026-08-21TI-2025-40820 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Priority CRITICAL 89KEV 2026-03-18TI-2024-18266 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 86KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records
Collaboration 41 records CRITICAL Collaboration Server 6 records MEDIUM Zimbra 5 records MEDIUM Zimbra Collaboration Server 2 records MEDIUM Zimbra Collaboration Suite 2 records MEDIUM Collaboration Suite 1 record LOW Zm-ajax 1 record LOW Zm-mailbox 1 record LOW

Records

2 records in Zimbra Collaboration Server · all components

TI-2015-05492 CVE-2015-6541 · GHSA-2rv3-6v8p-2p2m

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in…

Priority MEDIUM 43

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that ch…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02869 Published 2016-04-08 No fix listed CWE-352
Open these records in search →