Synacor vulnerabilities

Products

• Zimbra Collaboration Suite 98
• Zimbra Collaboration Suite (zcs) 22
• Zimbra Collaboration Server 5
• Zimbra Collaboration 2

Newest

• synacor zimbra collaboration Stored Cross-Site Scripting in Zimbra CVE-2026-66912 5.3 MediumOctober 29, 2026
• synacor zimbra collaboration Stored Cross-Site Scripting in Zimbra CVE-2026-66911 5.3 MediumOctober 29, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion CVE-2026-115786 6.5 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address CVE-2026-115785 4.3 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter CVE-2026-93638 6.1 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name CVE-2026-93636 4.3 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records CVE-2026-93634 4.3 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters CVE-2026-93633 5.4 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking CVE-2026-93631 7.1 HighOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters CVE-2026-50053 8.7 HighOctober 23, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address CVE-2026-93647 9.3 CriticalSeptember 25, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request CVE-2026-93643 9.8 CriticalSeptember 25, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation CVE-2026-93642 9.3 CriticalSeptember 25, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation CVE-2026-93641 9.3 CriticalSeptember 25, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability... CVE-2026-73576 6.3 MediumAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability... CVE-2026-73575 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the... CVE-2026-73574 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra... CVE-2026-73573 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability... CVE-2026-73572 6.1 MediumAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to... CVE-2026-73571 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 more A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when... CVE-2026-73570 In KEVPublic exploit EPSS 71.7% 8.9 HighAugust 13, 2026
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A Cross-Site Request Forgery... CVE-2026-33373 8.8 HighMarch 30, 2026
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery... CVE-2026-33372 5.4 MediumMarch 20, 2026
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. An XML External Entity (XXE)... CVE-2026-33371 4.3 MediumMarch 20, 2026
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A stored cross-site... CVE-2026-33370 6.1 MediumMarch 20, 2026
• synacor zimbra collaboration suite Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox... CVE-2026-33369 4.3 MediumMarch 20, 2026
• synacor zimbra collaboration suite Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS)... CVE-2026-33368 6.1 MediumMarch 20, 2026
• zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 more Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS... CVE-2025-66376 In KEV EPSS 20.2% 7.2 HighJanuary 5, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra... CVE-2025-68645 In KEVPublic exploit EPSS 48.9% 8.8 HighDecember 22, 2025
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross... CVE-2025-48700 In KEV 6.1 MediumJune 23, 2025
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0... CVE-2024-45516 6.1 MediumMay 14, 2025
• synacor zimbra collaboration suite In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability... CVE-2025-32354 8.8 HighApril 29, 2025
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site... CVE-2025-27915 In KEV 5.4 MediumMarch 12, 2025
• synacor zimbra collaboration suite SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x... CVE-2025-25065 5.3 MediumFebruary 3, 2025
• synacor zimbra collaboration suite SQL injection vulnerability in the ZimbraSyncService SOAP endpoint in Zimbra Collaboration 10.0.x... CVE-2025-25064 Public exploit EPSS 36.7% 8.8 HighFebruary 3, 2025
• synacor zimbra collaboration suite An issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and... CVE-2024-54663 7.5 HighDecember 19, 2024
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS)... CVE-2024-45517 6.1 MediumNovember 21, 2024
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A Cross-Site Scripting (XSS)... CVE-2024-45514 6.1 MediumNovember 21, 2024
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting... CVE-2024-45513 4.8 MediumNovember 21, 2024
• synacor zimbra collaboration suite An issue was discovered in webmail in Zimbra Collaboration (ZCS) through 10.1. An attacker can... CVE-2024-45512 6.1 MediumNovember 21, 2024
• synacor zimbra collaboration suite In Zimbra Collaboration (ZCS) 9.0 and 10.0, a vulnerability in the Webmail Modern UI allows... CVE-2024-45194 4.8 MediumNovember 21, 2024
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A reflected Cross-Site... CVE-2024-45511 6.1 MediumNovember 20, 2024
• synacor zimbra collaboration suite An issue was discovered in Zimbra Collaboration (ZCS) through 10.0. Zimbra Webmail (Modern UI) is... CVE-2024-45510 6.1 MediumNovember 20, 2024
• synacor zimbra collaboration suite A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration... CVE-2024-50599 EPSS 63.6% 6.1 MediumNovember 7, 2024
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0... CVE-2024-45519 In KEVPublic exploit EPSS 99.9% 10.0 CriticalOctober 2, 2024
• zimbra collaboration, synacor zimbra collaboration suite (zcs) +1 more An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS)... CVE-2024-27443 In KEV EPSS 24.6% 6.1 MediumAugust 12, 2024
• zimbra collaboration, synacor zimbra collaboration suite +1 more Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the... CVE-2023-50808 6.1 MediumFebruary 13, 2024
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. CVE-2023-37580 In KEV EPSS 49.1% 6.1 MediumJuly 31, 2023
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker... CVE-2023-34192 In KEV EPSS 77.3% 9.0 CriticalJuly 6, 2023
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a... CVE-2022-3569 Public exploit 7.8 HighOctober 17, 2022
• Show olderLoading…