Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Synacor

Synacor vulnerabilities

Products

Zimbra Collaboration Suite98
Zimbra Collaboration Suite (zcs)22
Zimbra Collaboration Server5
Zimbra Collaboration2

Newest

Known exploitedIn KEVPublic exploitFix available

synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload...CVE-2022-41352In KEVPublic exploitEPSS 95.5%9.8 CriticalSeptember 26, 2022
synacor zimbra server, zimbra collaboration +1 moreZimbra zmslapd arbitrary module loadCVE-2022-37393Public exploit7.8 HighAugust 16, 2022
synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...CVE-2022-37042In KEVPublic exploitEPSS 92.1%9.8 CriticalAugust 11, 2022
synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component...CVE-2022-27926In KEVEPSS 17.6%6.1 MediumApril 20, 2022
synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...CVE-2022-27925In KEVPublic exploitEPSS 98.7%7.2 HighApril 20, 2022
synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject...CVE-2022-27924In KEVEPSS 93.9%7.5 HighApril 20, 2022
synacor zimbra collaboration suite, zimbra collaborate suite (zcs) +1 moreAn issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15...CVE-2022-24682In KEVEPSS 30.9%6.1 MediumFebruary 9, 2022
synacor zimbra collaboration suiteAn issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers...CVE-2020-189856.1 MediumDecember 15, 2021
synacor zimbra collaboration suiteA reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp...CVE-2020-189846.1 MediumDecember 15, 2021
synacor zimbra collaboration suiteAn XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15...CVE-2020-136536.1 MediumJuly 2, 2020
synacor zimbra collaboration suiteZimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an...CVE-2020-128468.0 HighJune 3, 2020
synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors...CVE-2020-86335.3 MediumFebruary 18, 2020
synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed...CVE-2020-7796In KEVEPSS 93.6%9.8 CriticalFebruary 18, 2020
synacor zimbra collaboration serverSynacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.CVE-2014-85639.8 CriticalJanuary 27, 2020
synacor zimbra collaboration serverZimbra Collaboration before 8.6.0 patch5 has XSS.CVE-2015-22495.4 MediumJanuary 27, 2020
synacor zimbra collaboration serverSynacor Zimbra Collaboration before 8.0.8 has XSS.CVE-2014-55006.1 MediumJanuary 27, 2020
synacor zimbra collaboration serverZimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.CVE-2019-113185.4 MediumJanuary 27, 2020
synacor zimbra collaboration serverSynacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.CVE-2015-22306.1 MediumMay 30, 2019
synacor zimbra collaboration suiteSynacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and...CVE-2015-76096.1 MediumMay 30, 2019
synacor zimbra collaboration suiteSynacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via...CVE-2018-109484.8 MediumMay 30, 2019
synacor zimbra collaboration suiteThere is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra...CVE-2018-144256.1 MediumMay 30, 2019
synacor zimbra collaboration suiteAn issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x...CVE-2018-15131Public exploit5.3 MediumMay 30, 2019
synacor zimbra collaboration suitemailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8...CVE-2018-186316.1 MediumMay 29, 2019
synacor zimbra collaboration suiteSynacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web...CVE-2018-140136.1 MediumMay 29, 2019
synacor zimbra collaboration suiteZimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.CVE-2019-69816.5 MediumMay 29, 2019
synacor zimbra collaboration suiteZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra...CVE-2018-201609.8 CriticalMay 29, 2019
synacor zimbra collaboration suiteSynacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in...CVE-2019-69809.8 CriticalMay 29, 2019
synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 moremailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML...CVE-2019-9670In KEVPublic exploitEPSS 100.0%9.8 CriticalMay 29, 2019
synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8...CVE-2019-9621In KEVPublic exploitEPSS 81.0%7.5 HighApril 30, 2019
synacor zimbra collaboration suiteZimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value.CVE-2018-179385.3 MediumOctober 3, 2018
synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7...CVE-2018-109396.1 MediumMay 30, 2018
synacor zimbra collaboration suite, zimbra collaboration suite +1 moreCross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite ...CVE-2015-76108.8 HighMay 30, 2018
synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before...CVE-2018-109516.5 MediumMay 10, 2018
synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before...CVE-2018-109505.3 MediumMay 10, 2018
synacor zimbra collaboration suitemailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows...CVE-2018-10949Public exploit5.3 MediumMay 10, 2018
synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreCross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in...CVE-2018-6882In KEVEPSS 29.8%6.1 MediumMarch 27, 2018
synacor zimbra collaboration suiteSynacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS.CVE-2017-87835.4 MediumFebruary 4, 2018
synacor zimbra collaboration suiteSynacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS.CVE-2017-177036.1 MediumFebruary 4, 2018
synacor zimbra collaboration suiteCross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows...CVE-2017-72886.1 MediumMay 23, 2017
synacor zimbra collaboration suiteDirectory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows...CVE-2017-68219.8 CriticalMay 23, 2017
synacor zimbra collaboration suiteA service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed...CVE-2017-68139.8 CriticalMay 23, 2017
synacor zimbra collaboration suiteMultiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra...CVE-2016-34038.8 HighMay 17, 2017
synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External...CVE-2016-99249.8 CriticalMarch 29, 2017
synacor zimbra collaboration suiteUnspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect...CVE-2016-40197.5 HighJanuary 18, 2017
synacor zimbra collaboration suiteMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow...CVE-2016-39996.1 MediumJanuary 18, 2017
synacor zimbra collaboration suiteZimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via...CVE-2016-34159.1 CriticalJanuary 18, 2017
synacor zimbra collaboration suiteUnspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote...CVE-2016-34146.5 MediumJanuary 18, 2017
synacor zimbra collaboration suiteUnspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect...CVE-2016-34137.5 HighJanuary 18, 2017
synacor zimbra collaboration suiteMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow...CVE-2016-34126.1 MediumJanuary 18, 2017
synacor zimbra collaboration suiteCross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote...CVE-2016-3411Public exploit6.1 MediumJanuary 18, 2017
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open