Zimbra

Records95All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

Zimbra records in CISA KEV

TI-2026-51660 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability CRITICAL 98KEV 2026-08-21 TI-2025-40820 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability CRITICAL 89KEV 2026-03-18 TI-2024-18266 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CRITICAL 86KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Collaboration 41 records CRITICAL Collaboration Server 6 records MEDIUM Zimbra 5 records MEDIUM Zimbra Collaboration Server 2 records MEDIUM Zimbra Collaboration Suite 2 records MEDIUM Collaboration Suite 1 record LOW Zm-ajax 1 record LOW Zm-mailbox 1 record LOW

Records

1 record in Zm-mailbox · all components

TI-2020-08215 CVE-2020-10194 · GHSA-72wm-wxqm-26cv

cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows…

LOW 31

cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0121 Published 2020-03-20 No fix listed CWE-862

Open these records in search →