Login Request a demo
CO
Email
Collaboration
by Zimbra · last CVE Oct 23, 2026
On CISA KEVExploited in the wild
74
CVEs
3
On KEV
9.8
Max CVSS
22
New 30D
Vulnerabilities74In the news12Timeline
Severity mix
Critical 4High 20Medium 47Low 2
Severity
All severities74Critical4High20Medium47Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Collaboration to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-29382
9.8
1%
Jul 6
An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2023-29381
9.8
1%
Jul 6
An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters
Affected: 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +34 more
CVE-2022-32294
9.8
3%
Jul 11
Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command)
Affected: 8.8.15
CVE-2021-35209
9.8
3%
Jul 2
An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16
Affected: 8.8 before 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +28 more
Showing 4