Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Zimbra Collaboration Suite 10.1.20 Clear all filters
TI-2026-69621 CVE-2026-50055 · GHSA-p88h-r6ph-r7j6

Sieve notify action bypasses mail forwarding restriction in Zimbra

Priority LOW 29

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00363 Published 2026-10-08 Fixed in 10.1.20 CWE-863
TI-2026-69620 CVE-2026-50054 · GHSA-6c75-c59q-9624

Zimbra Collaboration Suite flaw lets accounts grant mailbox access

Priority LOW 30

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00171 Published 2026-10-08 Fixed in 10.1.20 CWE-269
TI-2026-69618 CVE-2026-10631 · GHSA-7jfc-2g3q-h5mf

Zimbra Collaboration Suite EWS authorization bypass exposes mailboxes

Priority LOW 29

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, f…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00287 Published 2026-10-08 Fixed in 10.1.20 CWE-639