Login Request a demo
ZI
Product
Zimbra
by Zimbra · last CVE Nov 22, 2024
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities5Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zimbra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9665
6.5
0%
Nov 22
Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability
Affected: before 9.0.0; 10.0.0 before 10.0.10; 10.1.0 before 10.1.2; 9.0.0; 9.0.0; 9.0.0; +18 more
CVE-2020-11737
6.1
2%
May 5
A cross-site scripting (XSS) vulnerability in Web Client in Zimbra 9.0 allows a remote attacker to craft links in an E-Mail message or calendar invite to execute arbitrary…
Affected: 9.0.0
CVE-2013-1938
6.1
3%
Feb 12
Zimbra 2013 has XSS in aspell.php
Affected: 2013
Showing 3