Skip to content

Zimbra vulnerabilities

Products

Newest

zimbra collaborationIn Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords)...CVE-2023-265626.5 MediumFebruary 13, 2024
zimbra zm-ajaxZimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scriptingCVE-2017-201882.6 LowJanuary 2, 2024
zimbra collaborationAn XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an...CVE-2023-431036.1 MediumDecember 7, 2023
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be...CVE-2023-431026.1 MediumDecember 7, 2023
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access...CVE-2023-411067.5 HighDecember 7, 2023
zimbraIn Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10...CVE-2023-387507.5 HighJuly 31, 2023
zimbra collaborationFile Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute...CVE-2023-341938.8 HighJuly 6, 2023
zimbra collaborationAn issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary...CVE-2023-293829.8 CriticalJuly 6, 2023
zimbra collaborationAn issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate...CVE-2023-293819.8 CriticalJuly 6, 2023
zimbra collaborationIn Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to...CVE-2023-240327.8 HighJune 15, 2023
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of...CVE-2023-240316.1 MediumJune 15, 2023
zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...CVE-2023-240306.1 MediumJune 15, 2023
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in...CVE-2022-459136.1 MediumJanuary 6, 2023
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login...CVE-2022-459116.1 MediumJanuary 6, 2023
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can...CVE-2022-459127.2 HighDecember 5, 2022
zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding...CVE-2022-413516.1 MediumOctober 12, 2022
zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a...CVE-2022-413506.1 MediumOctober 12, 2022
zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter...CVE-2022-413496.1 MediumOctober 12, 2022
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror...CVE-2022-413486.1 MediumOctober 12, 2022
zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo...CVE-2022-413477.8 HighSeptember 26, 2022
synacor zimbra server, zimbra collaboration +1 moreZimbra zmslapd arbitrary module loadCVE-2022-37393Public exploit7.8 HighAugust 16, 2022
zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called...CVE-2022-370446.1 MediumAugust 11, 2022
zimbra collaborationAn issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9...CVE-2022-370435.7 MediumAugust 11, 2022
zimbra collaborationAn issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite ...CVE-2022-370417.5 HighAugust 11, 2022
zimbra collaborationZimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created...CVE-2022-32294Disputed9.8 CriticalJuly 11, 2022
zimbra collaborationAn issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9...CVE-2021-352076.1 MediumJuly 2, 2021
zimbra collaborationAn issue was discovered in ZmMailMsgView.js in the Calendar Invite component in Zimbra...CVE-2021-352085.4 MediumJuly 2, 2021
zimbra collaborationAn issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite...CVE-2021-352099.8 CriticalJuly 2, 2021
zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...CVE-2021-348076.1 MediumJuly 2, 2021
zimbra collaborationIn Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists...CVE-2020-351236.5 MediumDecember 17, 2020
zimbraCross-site scripting in ZimbraCVE-2020-117376.1 MediumMay 5, 2020
zimbra zm-mailboxcs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows...CVE-2020-101946.5 MediumMarch 20, 2020
zimbraZimbra 2013 has XSS in aspell.phpCVE-2013-1938Public exploit6.1 MediumFebruary 12, 2020
zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89456.1 MediumJanuary 27, 2020
zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89466.1 MediumJanuary 27, 2020
zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.CVE-2019-89476.1 MediumJanuary 27, 2020
zimbra collaboration serverZimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin...CVE-2019-124274.8 MediumJanuary 27, 2020
zimbra collaboration serverIn Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.CVE-2019-153136.1 MediumJanuary 27, 2020
synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7...CVE-2018-109396.1 MediumMay 30, 2018
synacor zimbra collaboration suite, zimbra collaboration suite +1 moreCross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite ...CVE-2015-76108.8 HighMay 30, 2018
zimbra collaboration serverMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow...CVE-2016-57216.1 MediumAugust 29, 2016
zimbra collaboration serverMultiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra...CVE-2015-6541Public exploit8.8 HighApril 8, 2016
zimbra collaboration serverUnspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0...CVE-2013-721710.0 HighDecember 26, 2013
zimbraCross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra...CVE-2012-1213Public exploit4.3 MediumFebruary 20, 2012
zimbra collaboration suiteMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4...CVE-2008-12264.3 MediumMarch 10, 2008