ZC
Product
Zimbra Collaboration Suite (ZCS)
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
17
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 7Low 0
Watch
Add Zimbra Collaboration Suite (ZCS) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45519 In wildKEV | 9.8 | Oct 2 | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41352 RansomwareIn wildKEV | 9.8 | Sep 26 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Affected: All versions, or not specified |
| CVE-2022-37042 RansomwareIn wildKEV | 9.8 | Aug 11 | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2019-9670 In wildKEV | 9.8 | May 29 | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Affected: All versions, or not specified |
| CVE-2023-34192 In wildKEV | 9.0 | Jul 6 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Affected: All versions, or not specified |
| CVE-2026-73570 In wildKEV | 8.9 | Aug 13 | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2025-68645 In wildKEV | 8.8 | Dec 22 | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Affected: All versions, or not specified |
| CVE-2022-27924 RansomwareIn wildKEV | 7.5 | Apr 20 | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2019-9621 In wildKEV | 7.5 | Apr 30 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability Affected: All versions, or not specified |
| CVE-2022-27925 RansomwareIn wildKEV | 7.2 | Apr 20 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Affected: All versions, or not specified |
| CVE-2025-66376 In wildKEV | 6.1 | Jan 5 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2025-48700 In wildKEV | 6.1 | Jun 23 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Affected: All versions, or not specified |
| CVE-2024-27443 In wildKEV | 6.1 | Aug 12 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Affected: All versions, or not specified |
| CVE-2023-37580 In wildKEV | 6.1 | Jul 31 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Affected: All versions, or not specified |
| CVE-2022-27926 In wildKEV | 6.1 | Apr 20 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Affected: All versions, or not specified |
| CVE-2018-6882 RansomwareIn wildKEV | 6.1 | Mar 27 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Affected: All versions, or not specified |
| CVE-2025-27915 In wildKEV | 5.4 | Mar 12 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Affected: All versions, or not specified |
Showing 17