Vulnerabilities

TI-2025-41463 CVE-2025-67809 · GHSA-4f5p-gq89-4wfh

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.

LOW 21

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00294 Published 2025-12-15 No fix listed CWE-798

TI-2024-30550 CVE-2024-45515 · GHSA-63g8-5j2r-qj8f

An issue was discovered in Zimbra Collaboration (ZCS) through 10.1.

LOW 27

An issue was discovered in Zimbra Collaboration (ZCS) through 10.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00342 Published 2025-07-30 No fix listed CWE-79

TI-2025-20638 CVE-2025-27914 · GHSA-xr5m-494h-32gf

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1.

LOW 24

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00283 Published 2025-03-12 No fix listed CWE-79

TI-2024-30553 CVE-2024-45518 · GHSA-q2pq-wmhc-m7hv

An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before…

MEDIUM 59

An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before Patch 46.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.20729 Published 2024-10-22 No fix listed CWE-918

TI-2024-22123 CVE-2024-33536 · GHSA-cxhc-c4pj-cchp

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

LOW 24

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-12 No fix listed CWE-79

TI-2024-22122 CVE-2024-33535 · GHSA-cpff-q36h-wcr2

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

LOW 34

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2024-08-12 No fix listed CWE-22

TI-2024-22121 CVE-2024-33533 · GHSA-pmx7-9647-m98m

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2.

LOW 24

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0028 Published 2024-08-12 No fix listed CWE-79

TI-2024-18266 CVE-2024-27443 · GHSA-qrvg-mg33-q843

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

CRITICAL 86KEV

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.24606 Published 2024-08-12 No fix listed CWE-79

TI-2024-18265 CVE-2024-27442 · GHSA-39fv-qp4h-m8jw

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

LOW 36

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00349 Published 2024-08-12 No fix listed CWE-269

TI-2023-27722 CVE-2023-50808 · GHSA-4p3v-h475-6j2m

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.

MEDIUM 48

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00436 Published 2024-02-13 No fix listed CWE-94

TI-2023-26286 CVE-2023-48432 · GHSA-xvvw-m6mf-m9hw

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

LOW 28

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00465 Published 2024-02-13 No fix listed CWE-79

TI-2023-24218 CVE-2023-45207 · GHSA-gc2m-7496-w444

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

LOW 28

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0056 Published 2024-02-13 No fix listed CWE-79

TI-2023-24217 CVE-2023-45206 · GHSA-4hpc-jmfv-gf3c

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

LOW 30

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00484 Published 2024-02-13 No fix listed CWE-79

TI-2023-11697 CVE-2023-26562 · GHSA-cqc2-xcqm-6c3r

In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated…

LOW 30

In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messages when configured for Imap/smtp.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00585 Published 2024-02-13 No fix listed CWE-862

TI-2023-23093 CVE-2023-43103 · GHSA-5qw2-vv35-xqx6

An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4…

LOW 28

An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2023-12-07 No fix listed CWE-79

TI-2023-23092 CVE-2023-43102 · GHSA-2x5j-p7gf-w434

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4.

LOW 28

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2023-12-07 No fix listed CWE-79

TI-2023-21728 CVE-2023-41106 · GHSA-4gwv-75cm-wm4v

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3.

LOW 35

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01045 Published 2023-12-07 No fix listed

TI-2023-17035 CVE-2023-34193 · GHSA-r49f-h295-cg9m

File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to…

MEDIUM 42

File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive information via the ClientUploader function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01169 Published 2023-07-06 No fix listed CWE-434

TI-2023-13772 CVE-2023-29382 · GHSA-wgxh-v2xq-j8vr

An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute…

MEDIUM 51

An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01014 Published 2023-07-06 No fix listed CWE-94

TI-2023-13771 CVE-2023-29381 · GHSA-w7wp-hxj3-m732

An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to…

MEDIUM 51

An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01024 Published 2023-07-06 No fix listed CWE-863

TI-2023-09816 CVE-2023-24032 · GHSA-qjgx-39q9-8r6q

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user…

LOW 38

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalat…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00958 Published 2023-06-15 No fix listed CWE-77

TI-2023-09815 CVE-2023-24031 · GHSA-m2w7-whw4-8q9h

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15.

LOW 27

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00401 Published 2023-06-15 No fix listed CWE-79

TI-2023-09814 CVE-2023-24030 · GHSA-p8fv-37q7-2pr7

An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration…

LOW 27

An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2023-06-15 No fix listed CWE-601

TI-2022-22697 CVE-2022-45913 · GHSA-p7v6-2vr2-6qpq

An issue was discovered in Zimbra Collaboration (ZCS) 9.0.

LOW 28

An issue was discovered in Zimbra Collaboration (ZCS) 9.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00437 Published 2023-01-06 No fix listed CWE-79

TI-2022-22695 CVE-2022-45911 · GHSA-2hwr-88h3-g5j5

An issue was discovered in Zimbra Collaboration (ZCS) 9.0.

LOW 28

An issue was discovered in Zimbra Collaboration (ZCS) 9.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00437 Published 2023-01-06 No fix listed CWE-79

Vulnerabilities

Filters