Skip to contentSynacor Zimbra Collaboration Suite vulnerabilities
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota ExhaustionCVE-2026-1157866.5 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email AddressCVE-2026-1157854.3 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme ParameterCVE-2026-936386.1 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute NameCVE-2026-936364.3 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File RecordsCVE-2026-936344.3 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet CharactersCVE-2026-936335.4 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account LinkingCVE-2026-936317.1 High
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL ParametersCVE-2026-500538.7 High
- zimbra collaboration, synacor zimbra collaboration suite +1 moreIn Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability...CVE-2026-735766.3 Medium
- zimbra collaboration, synacor zimbra collaboration suite +1 moreIn Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability...CVE-2026-735753.1 Low
- zimbra collaboration, synacor zimbra collaboration suite +1 moreIn Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the...CVE-2026-735743.1 Low
- zimbra collaboration, synacor zimbra collaboration suite +1 moreIn Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra...CVE-2026-735733.1 Low
- zimbra collaboration, synacor zimbra collaboration suite +1 moreIn Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability...CVE-2026-735726.1 Medium
- zimbra collaboration, synacor zimbra collaboration suite +1 moreAn authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to...CVE-2026-735713.1 Low
- zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 moreA remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when...CVE-2026-73570In KEVPublic exploitEPSS 76.6%8.9 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A Cross-Site Request Forgery...CVE-2026-333738.8 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery...CVE-2026-333725.4 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. An XML External Entity (XXE)...CVE-2026-333714.3 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A stored cross-site...CVE-2026-333706.1 Medium
- synacor zimbra collaboration suiteZimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox...CVE-2026-333694.3 Medium
- synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS)...CVE-2026-333686.1 Medium
- zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 moreZimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS...CVE-2025-66376In KEVEPSS 20.2%7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra...CVE-2025-68645In KEVPublic exploitEPSS 50.6%8.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross...CVE-2025-48700In KEV6.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0...CVE-2024-455166.1 Medium
- synacor zimbra collaboration suiteIn Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability...CVE-2025-323548.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site...CVE-2025-27915In KEV5.4 Medium
- synacor zimbra collaboration suiteSSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x...CVE-2025-250655.3 Medium
- synacor zimbra collaboration suiteSQL injection vulnerability in the ZimbraSyncService SOAP endpoint in Zimbra Collaboration 10.0.x...CVE-2025-25064Public exploitEPSS 36.5%8.8 High
- synacor zimbra collaboration suiteAn issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and...CVE-2024-546637.5 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS)...CVE-2024-455176.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A Cross-Site Scripting (XSS)...CVE-2024-455146.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting...CVE-2024-455134.8 Medium
- synacor zimbra collaboration suiteAn issue was discovered in webmail in Zimbra Collaboration (ZCS) through 10.1. An attacker can...CVE-2024-455126.1 Medium
- synacor zimbra collaboration suiteIn Zimbra Collaboration (ZCS) 9.0 and 10.0, a vulnerability in the Webmail Modern UI allows...CVE-2024-451944.8 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A reflected Cross-Site...CVE-2024-455116.1 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) through 10.0. Zimbra Webmail (Modern UI) is...CVE-2024-455106.1 Medium
- synacor zimbra collaboration suiteA reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration...CVE-2024-50599EPSS 63.6%6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreThe postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0...CVE-2024-45519In KEVPublic exploitEPSS 99.9%10.0 Critical
- zimbra collaboration, synacor zimbra collaboration suite +1 moreZimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the...CVE-2023-508086.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.CVE-2023-37580In KEVEPSS 49.1%6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreCross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker...CVE-2023-34192In KEVEPSS 77.3%9.0 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreDue to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a...CVE-2022-3569Public exploit7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload...CVE-2022-41352In KEVPublic exploitEPSS 95.5%9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...CVE-2022-37042In KEVPublic exploitEPSS 92.1%9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component...CVE-2022-27926In KEVEPSS 17.6%6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...CVE-2022-27925In KEVPublic exploitEPSS 98.7%7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject...CVE-2022-27924In KEVEPSS 93.9%7.5 High
- synacor zimbra collaboration suite, zimbra collaborate suite (zcs) +1 moreAn issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15...CVE-2022-24682In KEVEPSS 30.9%6.1 Medium
- synacor zimbra collaboration suiteAn issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers...CVE-2020-189856.1 Medium
- Show olderLoading…