Read the docs

Zimbra

Records95All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

Zimbra records in CISA KEV
TI-2026-51660 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Priority CRITICAL 98KEV 2026-08-21TI-2025-40820 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Priority CRITICAL 89KEV 2026-03-18TI-2024-18266 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 86KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records
Collaboration 41 records CRITICAL Collaboration Server 6 records MEDIUM Zimbra 5 records MEDIUM Zimbra Collaboration Server 2 records MEDIUM Zimbra Collaboration Suite 2 records MEDIUM Collaboration Suite 1 record LOW Zm-ajax 1 record LOW Zm-mailbox 1 record LOW

Records

2 records in Zimbra Collaboration Suite · all components

TI-2015-06316 CVE-2015-7610 · GHSA-6f8r-6vw8-h9xj

Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration…

Priority MEDIUM 41

Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hija…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01231 Published 2018-05-30 No fix listed CWE-352
Open these records in search →