Browse CVEs

HIGH 8.8 CVE-2026-33373 An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A Cross-Site Request Forgery (CSRF) vulnerability exists in Zimbra Web Client du… Zimbra Collaboration Suite 10.0.18 / 10.1.13+ Fix from $1,9502026-03-30 MEDIUM 6.1 CVE-2026-33370 An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Zimbra Briefcase… Zimbra Collaboration Suite 10.1.16+ Fix from $1,6002026-03-20 MEDIUM 5.4 CVE-2026-33372 An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due t… Zimbra Collaboration Suite 10.1.16+ Fix from $1,6002026-03-20 MEDIUM 6.1 CVE-2026-33368 Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/… Zimbra Collaboration Suite 10.1.16+ Fix from $1,6002026-03-20 MEDIUM 6.1 CVE-2025-66376 KEVEPSS 22% Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives… Zimbra Collaboration Suite 10.0.18 / 10.1.13+ Fix from $1,6002026-01-05 HIGH 8.8 CVE-2025-68645 KEVEPSS 32% A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling … Zimbra Collaboration Suite 10.0.18 / 10.1.13+ Fix from $1,9502025-12-22 MEDIUM 6.1 CVE-2025-48700 KEV An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Clas… Zimbra Collaboration Suite 10.0.12 / 10.1.4+ Fix from $1,6002025-06-23 MEDIUM 6.1 CVE-2024-45516 An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47.… Zimbra Collaboration Suite 10.0.12 / 10.1.4+ Fix from $1,6002025-05-14 HIGH 8.8 CVE-2025-32354 In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/… Zimbra Collaboration Suite 10.1.4+ Fix from $1,9502025-04-29 MEDIUM 5.4 CVE-2025-27915 KEV An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Classic … Zimbra Collaboration Suite 10.0.13 / 10.1.5+ Fix from $1,6002025-03-12 HIGH 8.8 CVE-2025-25064EPSS 37% SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to ins… Zimbra Collaboration Suite 10.0.12 / 10.1.4+ Fix from $1,9502025-02-03 MEDIUM 5.3 CVE-2025-25065 SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.1.x before 10.1.4 allows unaut… Zimbra Collaboration Suite 9.0.0 / 10.0.12+ Fix from $1,6002025-02-03 HIGH 7.5 CVE-2024-54663 An issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Local File Inclusion (LFI) vulnerability exi… Zimbra Collaboration Suite 10.0.11 / 10.1.3+ Fix from $1,9502024-12-19 MEDIUM 5.4 CVE-2024-45517 An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability in the /h/rest endpoint of the Zimbra … Zimbra Collaboration Suite 8.8.15 / 10.0.9+ Fix from $1,6002024-11-21 MEDIUM 5.4 CVE-2024-45512 An issue was discovered in webmail in Zimbra Collaboration (ZCS) through 10.1. An attacker can exploit this vulnerability by creating a folder in the… Zimbra Collaboration Suite 9.0.0 / 10.0.9+ Fix from $1,6002024-11-21 MEDIUM 5.4 CVE-2024-45514 An issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A Cross-Site Scripting (XSS) vulnerability exists in one of the endpoints of Zim… Zimbra Collaboration Suite 8.8.15 / 10.0.9+ Fix from $1,6002024-11-21 MEDIUM 5.4 CVE-2024-45510 An issue was discovered in Zimbra Collaboration (ZCS) through 10.0. Zimbra Webmail (Modern UI) is vulnerable to a stored Cross-Site Scripting (XSS) a… Zimbra Collaboration Suite 9.0.0 / 10.0.9+ Fix from $1,6002024-11-20 MEDIUM 5.4 CVE-2024-45511 An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A reflected Cross-Site Scripting (XSS) issue exists through the Briefcase module … Zimbra Collaboration Suite 10.0.9+ Fix from $1,6002024-11-20 MEDIUM 6.1 CVE-2024-50599EPSS 61% A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the webmail cal… Zimbra Collaboration Suite Mitigation only Fix from $1,6002024-11-07 CRITICAL 9.8 CVE-2024-45519 KEVEPSS 100% The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 somet… Zimbra Collaboration Suite 8.8.15 / 10.0.9+ Fix from $2,3002024-10-02 MEDIUM 6.1 CVE-2023-37580 KEVEPSS 47% Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. Zimbra Collaboration Suite 8.8.15+ Fix from $1,6002023-07-31 CRITICAL 9.0 CVE-2023-34192 KEVEPSS 77% Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to th… Zimbra Collaboration Suite Mitigation only Fix from $2,3002023-07-06 HIGH 7.8 CVE-2022-3569 Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 a… Zimbra Collaboration Suite after 9.0.0 Fix from $1,9502022-10-17 CRITICAL 9.8 CVE-2022-41352 KEVEPSS 95% An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extr… Zimbra Collaboration Suite Patch available Fix from $2,3002022-09-26 CRITICAL 9.8 CVE-2022-37042 KEVEPSS 92% Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing aut… Zimbra Collaboration Suite Patch available Fix from $2,3002022-08-12 HIGH 7.5 CVE-2022-27924 KEVEPSS 85% Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. Thes… Zimbra Collaboration Suite Mitigation only Fix from $1,9502022-04-21 HIGH 7.2 CVE-2022-27925 KEVEPSS 99% Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated u… Zimbra Collaboration Suite Mitigation only Fix from $1,9502022-04-21 MEDIUM 6.1 CVE-2022-27926 KEVEPSS 18% A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauth… Zimbra Collaboration Suite Mitigation only Fix from $1,6002022-04-21 MEDIUM 6.1 CVE-2022-24682 KEVEPSS 31% An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild start… Zimbra Collaboration Suite 8.8.15+ Fix from $1,6002022-02-09 MEDIUM 6.1 CVE-2020-18984 A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unau… Zimbra Collaboration Suite Mitigation only Fix from $1,6002021-12-15