Login Request a demo
ZI
Product
Zimbra
by Zimbra · last CVE Nov 22, 2024
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities5Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zimbra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38750
7.5
1%
Jul 31
In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed
Affected: 8.8.0 before 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; 8.8.15; +23 more
CVE-2024-9665
6.5
0%
Nov 22
Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability
Affected: before 9.0.0; 10.0.0 before 10.0.10; 10.1.0 before 10.1.2; 9.0.0; 9.0.0; 9.0.0; +18 more
CVE-2020-11737
6.1
2%
May 5
A cross-site scripting (XSS) vulnerability in Web Client in Zimbra 9.0 allows a remote attacker to craft links in an E-Mail message or calendar invite to execute arbitrary…
Affected: 9.0.0
CVE-2013-1938
6.1
3%
Feb 12
Zimbra 2013 has XSS in aspell.php
Affected: 2013
CVE-2012-1213
–
2%
Feb 24
Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote…
Affected: All versions, or not specified
Showing 5