Product by Zimbra

    Zimbra Collaboration

    89 known vulnerabilities in Zimbra Collaboration (Zimbra), 18 of them actively exploited (CISA KEV).

    Key figures

    89

    Vulnerabilities

    18

    Actively exploited (KEV)

    6

    Used by ransomware

    24

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zimbra Collaboration (Zimbra)
    CriticalCVE-2022-41352

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2022-37042

    Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2026-73570

    Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

    In CISA KEValso in 1 other product

    		8.9
    CriticalCVE-2022-27924

    Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2022-27925

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    In CISA KEVRansomware

    		7.2
    CriticalCVE-2024-45519

    Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

    In CISA KEV

    		10.0
    CriticalCVE-2025-68645

    Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

    In CISA KEV

    		8.8
    CriticalCVE-2022-24682

    Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

    In CISA KEVRansomware

    		6.1
    CriticalCVE-2018-6882

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    In CISA KEVRansomware

    		6.1
    CriticalCVE-2019-9670

    Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

    In CISA KEV

    		9.8
    CriticalCVE-2020-7796

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2023-34192

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    In CISA KEV

    		9.0
    CriticalCVE-2025-66376

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

    In CISA KEValso in 1 other product

    		7.2
    CriticalCVE-2019-9621

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2023-37580

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    In CISA KEV

    		6.1
    CriticalCVE-2022-27926

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    In CISA KEV

    		6.1
    CriticalCVE-2025-27915

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    In CISA KEV

    		5.4
    CriticalCVE-2025-48700

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    In CISA KEV

    		6.1
    HighCVE-2025-25064

    Zimbra Collaboration: SQL Injection

    		8.8
    MediumCVE-2024-50599

    Zimbra Collaboration: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2019-6980

    Zimbra Collaboration: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2017-6821

    Zimbra Collaboration: Path Traversal

    		9.8
    CriticalCVE-2016-9924

    Zimbra Collaboration: XML External Entity (XXE)

    		9.8
    CriticalCVE-2017-6813

    Zimbra Collaboration: security vulnerability

    		9.8
    CriticalCVE-2018-20160

    Zimbra Collaboration: XML External Entity (XXE)

    		9.8

    All vulnerabilities in search

    News

    All products by Zimbra