Skip to contentSynacor Zimbra Collaboration vulnerabilities
- synacor zimbra collaborationStored Cross-Site Scripting in ZimbraCVE-2026-669125.3 Medium
- synacor zimbra collaborationStored Cross-Site Scripting in ZimbraCVE-2026-669115.3 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From AddressCVE-2026-936479.3 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas RequestCVE-2026-936439.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share InvitationCVE-2026-936429.3 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share InvitationCVE-2026-936419.3 Critical
- zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 moreA remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when...CVE-2026-73570In KEVPublic exploitEPSS 76.6%8.9 High
- zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 moreZimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS...CVE-2025-66376In KEVEPSS 20.2%7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra...CVE-2025-68645In KEVPublic exploitEPSS 50.6%8.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross...CVE-2025-48700In KEV6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site...CVE-2025-27915In KEV5.4 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreThe postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0...CVE-2024-45519In KEVPublic exploitEPSS 99.9%10.0 Critical
- zimbra collaboration, synacor zimbra collaboration suite (zcs) +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS)...CVE-2024-27443In KEVEPSS 24.6%6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.CVE-2023-37580In KEVEPSS 49.1%6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreCross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker...CVE-2023-34192In KEVEPSS 77.3%9.0 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreDue to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a...CVE-2022-3569Public exploit7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload...CVE-2022-41352In KEVPublic exploitEPSS 95.5%9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...CVE-2022-37042In KEVPublic exploitEPSS 92.1%9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component...CVE-2022-27926In KEVEPSS 17.6%6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...CVE-2022-27925In KEVPublic exploitEPSS 98.7%7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject...CVE-2022-27924In KEVEPSS 93.9%7.5 High
- synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed...CVE-2020-7796In KEVEPSS 93.6%9.8 Critical
- synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 moremailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML...CVE-2019-9670In KEVPublic exploitEPSS 100.0%9.8 Critical
- synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8...CVE-2019-9621In KEVPublic exploitEPSS 81.0%7.5 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreCross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in...CVE-2018-6882In KEVEPSS 29.8%6.1 Medium