Skip to contentZimbra Collaboration vulnerabilities
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be...CVE-2023-431026.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access...CVE-2023-411067.5 High
- zimbra collaborationFile Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute...CVE-2023-341938.8 High
- zimbra collaborationAn issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary...CVE-2023-293829.8 Critical
- zimbra collaborationAn issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate...CVE-2023-293819.8 Critical
- zimbra collaborationIn Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to...CVE-2023-240327.8 High
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of...CVE-2023-240316.1 Medium
- zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...CVE-2023-240306.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in...CVE-2022-459136.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login...CVE-2022-459116.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can...CVE-2022-459127.2 High
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding...CVE-2022-413516.1 Medium
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a...CVE-2022-413506.1 Medium
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter...CVE-2022-413496.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror...CVE-2022-413486.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo...CVE-2022-413477.8 High
- synacor zimbra server, zimbra collaboration +1 moreZimbra zmslapd arbitrary module loadCVE-2022-37393Public exploit7.8 High
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called...CVE-2022-370446.1 Medium
- zimbra collaborationAn issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9...CVE-2022-370435.7 Medium
- zimbra collaborationAn issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite ...CVE-2022-370417.5 High
- zimbra collaborationZimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created...CVE-2022-32294Disputed9.8 Critical
- zimbra collaborationAn issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9...CVE-2021-352076.1 Medium
- zimbra collaborationAn issue was discovered in ZmMailMsgView.js in the Calendar Invite component in Zimbra...CVE-2021-352085.4 Medium
- zimbra collaborationAn issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite...CVE-2021-352099.8 Critical
- zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...CVE-2021-348076.1 Medium
- zimbra collaborationIn Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists...CVE-2020-351236.5 Medium
- zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89456.1 Medium
- zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89466.1 Medium
- zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.CVE-2019-89476.1 Medium
- zimbra collaboration serverZimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin...CVE-2019-124274.8 Medium
- zimbra collaboration serverIn Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.CVE-2019-153136.1 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7...CVE-2018-109396.1 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreCross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite ...CVE-2015-76108.8 High
- zimbra collaboration serverMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow...CVE-2016-57216.1 Medium
- zimbra collaboration serverMultiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra...CVE-2015-6541Public exploit8.8 High
- zimbra collaboration serverUnspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0...CVE-2013-721710.0 High
- zimbra collaboration suiteMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4...CVE-2008-12264.3 Medium