Login Request a demo
ZC
Product
Zimbra Collaboration Suite
by Synacor · last CVE Aug 13, 2026
On CISA KEVExploited in the wildRansomware-linked
89
CVEs
18
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities89In the news12Timeline
Severity mix
Critical 12High 19Medium 55Low 1
Severity
All severities89Critical12High19Medium55Low1
Exploitation
On CISA KEV18Exploited in the wild18
Watch

Add Zimbra Collaboration Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45519
In wildKEV
9.8
100%
Oct 2
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
Affected: before 8.8.15; 10.0.0 before 10.0.9; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2022-41352
RansomwareIn wildKEV
9.8
95%
Sep 26
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Affected: 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more
CVE-2022-37042
RansomwareIn wildKEV
9.8
92%
Aug 11
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2020-7796
In wildKEV
9.8
94%
Feb 18
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
Affected: before 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +2 more
CVE-2019-9670
In wildKEV
9.8
100%
May 29
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Affected: 8.7.0 before 8.7.11; 8.7.11; 8.7.11; 8.7.11; 8.7.11; 8.7.11; +5 more
CVE-2023-34192
In wildKEV
9.0
77%
Jul 6
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2019-6980
9.8
4%
May 29
Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component
Affected: 8.7.0 before 8.7.11; 8.8.0 before 8.8.9; 8.7.11; 8.7.11; 8.7.11; 8.7.11; +20 more
CVE-2018-20160
9.8
2%
May 29
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by…
Affected: 8.7.0 before 8.7.11; 8.8.0 before 8.8.9; 8.7.11; 8.7.11; 8.7.11; 8.7.11; +19 more
CVE-2017-6821
9.8
4%
May 23
Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vectors
Affected: through 8.7.5
CVE-2017-6813
9.8
3%
May 23
A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested operations
Affected: through 8.7.5
CVE-2016-9924
9.8
3%
Mar 29
Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks
Affected: through 8.7.3
CVE-2016-3415
9.1
2%
Jan 18
Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276
Affected: through 8.6.0
Showing 12