Login Request a demo
ZC
Product
Zimbra Collaboration Suite
by Synacor · last CVE Oct 23, 2026
On CISA KEVExploited in the wildRansomware-linked
94
CVEs
18
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities94In the news12Timeline
Severity mix
Critical 12High 20Medium 59Low 1
Severity
All severities94Critical12High20Medium59Low1
Exploitation
On CISA KEV18Exploited in the wild18
Watch

Add Zimbra Collaboration Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45519
In wildKEV
9.8
100%
Oct 2
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
Affected: before 8.8.15; 10.0.0 before 10.0.9; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2022-41352
RansomwareIn wildKEV
9.8
95%
Sep 26
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Affected: 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more
CVE-2022-37042
RansomwareIn wildKEV
9.8
92%
Aug 11
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2020-7796
In wildKEV
9.8
94%
Feb 18
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
Affected: before 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +2 more
CVE-2019-9670
In wildKEV
9.8
100%
May 29
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Affected: 8.7.0 before 8.7.11; 8.7.11; 8.7.11; 8.7.11; 8.7.11; 8.7.11; +5 more
CVE-2023-34192
In wildKEV
9.0
77%
Jul 6
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2026-73570
In wildKEV
8.9
72%
Aug 13
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Affected: before 10.1.20
CVE-2025-68645
In wildKEV
8.8
49%
Dec 22
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
Affected: 10.0.0 before 10.0.18; 10.1.0 before 10.1.13
CVE-2022-27924
RansomwareIn wildKEV
7.5
94%
Apr 20
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2019-9621
In wildKEV
7.5
81%
Apr 30
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
Affected: before 8.6.0; 8.7.0 before 8.7.11; 8.8.0 before 8.8.9; 8.6.0; 8.6.0; 8.6.0; +34 more
CVE-2022-27925
RansomwareIn wildKEV
7.2
99%
Apr 20
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2025-66376
In wildKEV
6.1
20%
Jan 5
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Affected: 10.0.0 before 10.0.18; 10.1.0 before 10.1.13
CVE-2025-48700
In wildKEV
6.1
2%
Jun 23
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Affected: 10.0.0 before 10.0.12; 10.1.0 before 10.1.4; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2023-37580
In wildKEV
6.1
49%
Jul 31
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Affected: 8.8.0 before 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +8 more
CVE-2022-27926
In wildKEV
6.1
18%
Apr 20
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Affected: 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +18 more
CVE-2022-24682
RansomwareIn wildKEV
6.1
31%
Feb 9
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
Affected: 8.8.0 before 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +25 more
CVE-2018-6882
RansomwareIn wildKEV
6.1
30%
Mar 27
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Affected: before 8.7.0; 8.7.0; 8.8.0; 8.8.1; 8.8.2; 8.8.3; +3 more
CVE-2025-27915
In wildKEV
5.4
4%
Mar 12
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Affected: 10.0.0 before 10.0.13; 10.1.0 before 10.1.5; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more
Showing 18