Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Zimbra Collaboration 10.1.17 Clear all filters
TI-2026-51665 CVE-2026-73575 · GHSA-2rhj-982v-52qv

Cross-site request forgery in Zimbra Collaboration

Priority LOW 16

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request c…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00154 Published 2026-08-13 Fixed in 10.1.17 CWE-352
TI-2026-51663 CVE-2026-73573 · GHSA-rwrq-wv6j-q425

Path traversal in Zimbra Collaboration

Priority LOW 29

In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00451 Published 2026-08-13 Fixed in 10.1.17 CWE-24
TI-2026-51662 CVE-2026-73572 · GHSA-4644-7rc8-9cw4

Cross-site scripting in Zimbra Collaboration

Priority LOW 27

In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific attachment content during inline previe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00263 Published 2026-08-13 Fixed in 10.1.17 CWE-79
TI-2026-51661 CVE-2026-73571 · GHSA-p856-mgqw-j9rq

Incorrect authorization in Zimbra Collaboration

Priority LOW 20

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-08-13 Fixed in 10.1.17 CWE-863