Product by Zimbra
Zimbra Collaboration
50 known vulnerabilities in Zimbra Collaboration (Zimbra), 3 of them actively exploited (CISA KEV).
Key figures
50
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability In CISA KEValso in 1 other product | 8.9 | |
| Critical | CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability In CISA KEValso in 1 other product | 7.2 | |
| Critical | CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability In CISA KEV | 6.1 | |
| High | CVE-2024-45518 | Zimbra Collaboration: Command Injection | 8.8 | |
| Critical | CVE-2021-35209 | Zimbra Collaboration: security vulnerability | 9.8 | |
| Critical | CVE-2022-32294 | Zimbra Collaboration: security vulnerability | 9.8 | |
| Medium | CVE-2021-35207 | Zimbra Collaboration: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2022-37393 | Zimbra zmslapd arbitrary module load | 7.8 | |
| Critical | CVE-2023-29381 | Zimbra Collaboration: Information Disclosure | 9.8 | |
| Critical | CVE-2023-29382 | Zimbra Collaboration: Code Execution | 9.8 | |
| High | CVE-2023-34193 | Zimbra Collaboration: Information Disclosure | 8.8 | |
| Medium | CVE-2020-35123 | Zimbra Collaboration: XML External Entity (XXE) | 6.5 | |
| High | CVE-2022-45912 | Zimbra Collaboration: Remote Code Execution | 7.2 | |
| High | CVE-2023-41106 | Zimbra Collaboration: security vulnerability | 7.5 | |
| High | CVE-2023-24032 | Zimbra Collaboration: Privilege Escalation | 7.8 | |
| Medium | CVE-2021-35208 | Zimbra Collaboration: security vulnerability | 5.4 | |
| High | CVE-2022-37041 | Zimbra Collaboration: security vulnerability | 7.5 | |
| Medium | CVE-2021-34807 | Zimbra Collaboration: Open Redirect | 6.1 | |
| Medium | CVE-2026-73576 | Zimbra Collaboration: Use of Predictable Algorithm in Random Number Generator | 6.3 | |
| High | CVE-2024-33535 | Zimbra Collaboration: File Inclusion | 7.5 | |
| Medium | CVE-2026-73572 | Zimbra Collaboration: Cross-site Scripting | 6.1 | |
| Medium | CVE-2023-26562 | Zimbra Collaboration: security vulnerability | 6.5 | |
| Medium | CVE-2023-45207 | Zimbra Collaboration: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2024-27442 | Zimbra Collaboration: Privilege Escalation | 7.8 | |
| Medium | CVE-2026-73573 | Zimbra Collaboration: Path Traversal: '../filedir' | 3.1 |
News
- Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosuresecurityweek,
- Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secretsthehackernews,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- Exploited Zimbra Flaw Highlights Shrinking Window to Patchdarkreading,
- KEV: Oracle, Zimbra, TrueConfsans-newsbites-mail,
- Hackers Target Zimbra Servers in Active Exploitation Campaignsecurityweek,