Zimbra

Records95All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

Zimbra records in CISA KEV

TI-2026-51660 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability CRITICAL 98KEV 2026-08-21 TI-2025-40820 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability CRITICAL 89KEV 2026-03-18 TI-2024-18266 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 86KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Collaboration 41 records CRITICAL Collaboration Server 6 records MEDIUM Zimbra 5 records MEDIUM Zimbra Collaboration Server 2 records MEDIUM Zimbra Collaboration Suite 2 records MEDIUM Collaboration Suite 1 record LOW Zm-ajax 1 record LOW Zm-mailbox 1 record LOW

Records

1 record in Zm-ajax · all components

TI-2017-14254 CVE-2017-20188 · GHSA-47rp-456r-h3xf

Zimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scripting

LOW 22

A vulnerability has been found in Zimbra zm-ajax up to 8.8.1 and classified as problematic.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00394 Published 2024-01-02 No fix listed CWE-79

Open these records in search →