[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjHwaQnNf5k065aZTYR5j9hLgK4JdfJ-__M6kKf-chBo":3,"g5a-family:synacor\u002Fzimbra_collaboration_suite":435,"g5a-ex:synacor\u002Fzimbra_collaboration_suite@*":436},{"success":4,"data":5},true,{"product":6,"versions":211,"topVulnerabilitiesByEpss":305,"kevVulnerabilities":365,"seoMetadata":413,"meta":432},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":210},"synacor","zimbra_collaboration_suite",93,62,9,"2025-05-14",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,149,151,153,155,157,160,162,164,166,168,170,172,174,176,178,180,183,186,188,190,192,194,196,198,200,202,205,207],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.10",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.11",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.12",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.13",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.14",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.15",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.16",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.17",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.18",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.2",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.3",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.4",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.5",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.6",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.7",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.8",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.9",{"version":55,"cve_count":56,"kev_count":16,"has_kev":17},"10.1.0",1,{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.1",{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.10",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.11",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.12",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.13",{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.14",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.15",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.2",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.3",{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.4",{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.5",{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.6",{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.7",{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.8",{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},"10.1.9",{"version":88,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.0",2,{"version":91,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.1",{"version":93,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.10",{"version":95,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.12",{"version":97,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.13",{"version":99,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.14",{"version":101,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.15",{"version":103,"cve_count":56,"kev_count":16,"has_kev":17},"6.0.16",{"version":105,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.2",{"version":107,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.3",{"version":109,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.4",{"version":111,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.5",{"version":113,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.6",{"version":115,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.7",{"version":117,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.8",{"version":119,"cve_count":89,"kev_count":16,"has_kev":17},"6.0.9",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.7",{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.0",{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.1",{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.2",{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.3",{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.4",{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.5",{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.6",{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.7",{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.8",{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.9",{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.0",{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.1",{"version":147,"cve_count":148,"kev_count":56,"has_kev":4},"8.6.0",8,{"version":150,"cve_count":56,"kev_count":56,"has_kev":4},"8.7",{"version":152,"cve_count":56,"kev_count":56,"has_kev":4},"8.7.0",{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.1",{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.10",{"version":158,"cve_count":159,"kev_count":89,"has_kev":4},"8.7.11",12,{"version":161,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.2",{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.3",{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.4",{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.5",{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.6",{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.7",{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.8",{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},"8.7.9",{"version":177,"cve_count":89,"kev_count":56,"has_kev":4},"8.8.0",{"version":179,"cve_count":56,"kev_count":56,"has_kev":4},"8.8.1",{"version":181,"cve_count":182,"kev_count":56,"has_kev":4},"8.8.10",6,{"version":184,"cve_count":185,"kev_count":56,"has_kev":4},"8.8.11",5,{"version":187,"cve_count":89,"kev_count":16,"has_kev":17},"8.8.12",{"version":189,"cve_count":11,"kev_count":185,"has_kev":4},"8.8.15",{"version":191,"cve_count":56,"kev_count":56,"has_kev":4},"8.8.2",{"version":193,"cve_count":56,"kev_count":56,"has_kev":4},"8.8.3",{"version":195,"cve_count":56,"kev_count":56,"has_kev":4},"8.8.4",{"version":197,"cve_count":56,"kev_count":56,"has_kev":4},"8.8.5",{"version":199,"cve_count":56,"kev_count":56,"has_kev":4},"8.8.6",{"version":201,"cve_count":16,"kev_count":16,"has_kev":17},"8.8.7",{"version":203,"cve_count":204,"kev_count":16,"has_kev":17},"8.8.8",3,{"version":206,"cve_count":148,"kev_count":56,"has_kev":4},"8.8.9",{"version":208,"cve_count":209,"kev_count":204,"has_kev":4},"9.0.0",7,"Zimbra Collaboration Suite by Synacor is a technology product with 93 tracked versions and 62 known security vulnerabilities including 9 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":56,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},{"version":88,"cve_count":89,"kev_count":16,"has_kev":17},{"version":91,"cve_count":89,"kev_count":16,"has_kev":17},{"version":93,"cve_count":89,"kev_count":16,"has_kev":17},{"version":95,"cve_count":89,"kev_count":16,"has_kev":17},{"version":97,"cve_count":89,"kev_count":16,"has_kev":17},{"version":99,"cve_count":89,"kev_count":16,"has_kev":17},{"version":101,"cve_count":89,"kev_count":16,"has_kev":17},{"version":103,"cve_count":56,"kev_count":16,"has_kev":17},{"version":105,"cve_count":89,"kev_count":16,"has_kev":17},{"version":107,"cve_count":89,"kev_count":16,"has_kev":17},{"version":109,"cve_count":89,"kev_count":16,"has_kev":17},{"version":111,"cve_count":89,"kev_count":16,"has_kev":17},{"version":113,"cve_count":89,"kev_count":16,"has_kev":17},{"version":115,"cve_count":89,"kev_count":16,"has_kev":17},{"version":117,"cve_count":89,"kev_count":16,"has_kev":17},{"version":119,"cve_count":89,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},{"version":147,"cve_count":148,"kev_count":56,"has_kev":4},{"version":150,"cve_count":56,"kev_count":56,"has_kev":4},{"version":152,"cve_count":56,"kev_count":56,"has_kev":4},{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},{"version":158,"cve_count":159,"kev_count":89,"has_kev":4},{"version":161,"cve_count":16,"kev_count":16,"has_kev":17},{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},{"version":177,"cve_count":89,"kev_count":56,"has_kev":4},{"version":179,"cve_count":56,"kev_count":56,"has_kev":4},{"version":181,"cve_count":182,"kev_count":56,"has_kev":4},{"version":184,"cve_count":185,"kev_count":56,"has_kev":4},{"version":187,"cve_count":89,"kev_count":16,"has_kev":17},{"version":189,"cve_count":11,"kev_count":185,"has_kev":4},{"version":191,"cve_count":56,"kev_count":56,"has_kev":4},{"version":193,"cve_count":56,"kev_count":56,"has_kev":4},{"version":195,"cve_count":56,"kev_count":56,"has_kev":4},{"version":197,"cve_count":56,"kev_count":56,"has_kev":4},{"version":199,"cve_count":56,"kev_count":56,"has_kev":4},{"version":201,"cve_count":16,"kev_count":16,"has_kev":17},{"version":203,"cve_count":204,"kev_count":16,"has_kev":17},{"version":206,"cve_count":148,"kev_count":56,"has_kev":4},{"version":208,"cve_count":209,"kev_count":204,"has_kev":4},[306,314,321,326,333,338,343,348,354,360],{"cveId":307,"description":308,"publishedDate":309,"cvssScore":310,"cvssVersion":311,"severity":312,"isKev":4,"epssScore":313},"CVE-2019-9670","mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover\u002FAutodiscover.xml.","2019-05-29",9.8,"v3.1","Critical",0.99986,{"cveId":315,"description":316,"publishedDate":317,"cvssScore":318,"cvssVersion":311,"severity":319,"isKev":4,"epssScore":320},"CVE-2022-27925","Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.","2022-04-21",7.2,"High",0.98676,{"cveId":322,"description":323,"publishedDate":317,"cvssScore":324,"cvssVersion":311,"severity":319,"isKev":4,"epssScore":325},"CVE-2022-27924","Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.",7.5,0.93908,{"cveId":327,"description":328,"publishedDate":329,"cvssScore":185,"cvssVersion":330,"severity":331,"isKev":17,"epssScore":332},"CVE-2013-7091","Directory traversal vulnerability in \u002Fres\u002FI18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a ..  (dot dot) in the skin parameter.  NOTE: this can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service\u002Fadmin\u002Fsoap API.","2013-12-13","v2","Medium",0.86311,{"cveId":334,"description":335,"publishedDate":336,"cvssScore":310,"cvssVersion":311,"severity":312,"isKev":4,"epssScore":337},"CVE-2020-7796","Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.","2020-02-18",0.84418,{"cveId":339,"description":340,"publishedDate":341,"cvssScore":324,"cvssVersion":311,"severity":319,"isKev":4,"epssScore":342},"CVE-2019-9621","Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.","2019-04-30",0.81037,{"cveId":344,"description":345,"publishedDate":346,"cvssScore":11,"cvssVersion":311,"severity":312,"isKev":4,"epssScore":347},"CVE-2023-34192","Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the \u002Fh\u002FautoSaveDraft function.","2023-07-06",0.77266,{"cveId":349,"description":350,"publishedDate":351,"cvssScore":352,"cvssVersion":311,"severity":331,"isKev":4,"epssScore":353},"CVE-2023-37580","Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.","2023-07-31",6.1,0.49083,{"cveId":355,"description":356,"publishedDate":357,"cvssScore":358,"cvssVersion":311,"severity":319,"isKev":17,"epssScore":359},"CVE-2025-25064","SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient sanitization of a user-supplied parameter. Authenticated attackers can exploit this vulnerability by manipulating a specific parameter in the request, allowing them to inject arbitrary SQL queries that could retrieve email metadata.","2025-02-03",8.8,0.36726,{"cveId":361,"description":362,"publishedDate":363,"cvssScore":352,"cvssVersion":311,"severity":331,"isKev":4,"epssScore":364},"CVE-2018-6882","Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment.","2018-03-27",0.29761,[366,375,379,383,387,391,398,402,406,409],{"cveId":367,"description":368,"publishedDate":369,"cvssScore":318,"severity":319,"isKev":4,"epssScore":370,"cisaVulnName":371,"cisaDateAdded":372,"cisaShortDescription":373,"cisaRequiredAction":374},"CVE-2025-66376","Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message.","2026-01-05",0.20227,"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","2026-03-18","Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":334,"description":335,"publishedDate":336,"cvssScore":310,"severity":312,"isKev":4,"epssScore":337,"cisaVulnName":376,"cisaDateAdded":377,"cisaShortDescription":378,"cisaRequiredAction":374},"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","2026-02-17","Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.",{"cveId":339,"description":340,"publishedDate":341,"cvssScore":324,"severity":319,"isKev":4,"epssScore":342,"cisaVulnName":380,"cisaDateAdded":381,"cisaShortDescription":382,"cisaRequiredAction":374},"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","2025-07-07","Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.",{"cveId":344,"description":345,"publishedDate":346,"cvssScore":11,"severity":312,"isKev":4,"epssScore":347,"cisaVulnName":384,"cisaDateAdded":385,"cisaShortDescription":386,"cisaRequiredAction":374},"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","2025-02-25","Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the \u002Fh\u002FautoSaveDraft function.",{"cveId":349,"description":350,"publishedDate":351,"cvssScore":352,"severity":331,"isKev":4,"epssScore":353,"cisaVulnName":384,"cisaDateAdded":388,"cisaShortDescription":389,"cisaRequiredAction":390},"2023-07-27","Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":392,"description":393,"publishedDate":317,"cvssScore":352,"severity":331,"isKev":4,"epssScore":394,"cisaVulnName":384,"cisaDateAdded":395,"cisaShortDescription":396,"cisaRequiredAction":397},"CVE-2022-27926","A reflected cross-site scripting (XSS) vulnerability in the \u002Fpublic\u002FlaunchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.",0.17634,"2023-04-03","Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.","Apply updates per vendor instructions.",{"cveId":315,"description":316,"publishedDate":317,"cvssScore":318,"severity":319,"isKev":4,"epssScore":320,"cisaVulnName":399,"cisaDateAdded":400,"cisaShortDescription":401,"cisaRequiredAction":397},"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","2022-08-11","Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.",{"cveId":322,"description":323,"publishedDate":317,"cvssScore":324,"severity":319,"isKev":4,"epssScore":325,"cisaVulnName":403,"cisaDateAdded":404,"cisaShortDescription":405,"cisaRequiredAction":397},"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","2022-08-04","Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.",{"cveId":361,"description":362,"publishedDate":363,"cvssScore":352,"severity":331,"isKev":4,"epssScore":364,"cisaVulnName":384,"cisaDateAdded":407,"cisaShortDescription":408,"cisaRequiredAction":397},"2022-04-19","Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.",{"cveId":307,"description":308,"publishedDate":309,"cvssScore":310,"severity":312,"isKev":4,"epssScore":313,"cisaVulnName":410,"cisaDateAdded":411,"cisaShortDescription":412,"cisaRequiredAction":397},"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","2022-01-10","Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.",{"title":414,"metaDescription":415,"keywords":416,"structuredData":417},"Zimbra Collaboration Suite by Synacor - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Zimbra Collaboration Suite by Synacor covering 93 versions with 62 tracked vulnerabilities including 3 critical and 4 high-severity issues and 9 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Zimbra Collaboration Suite vulnerabilities, Zimbra Collaboration Suite security, Zimbra Collaboration Suite CVE, Synacor Zimbra Collaboration Suite, Zimbra Collaboration Suite threat intelligence, Synacor security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Zimbra Collaboration Suite KEV, Zimbra Collaboration Suite exploited vulnerabilities",{"@context":418,"@type":419,"name":420,"description":415,"url":421,"manufacturer":422,"applicationCategory":426,"softwareVersion":427,"mainEntity":428},"https:\u002F\u002Fschema.org","SoftwareApplication","Zimbra Collaboration Suite","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsynacor\u002Fzimbra_collaboration_suite",{"@type":423,"name":424,"url":425},"Organization","Synacor","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsynacor","Security Software","93 versions tracked",{"@type":429,"name":430,"description":431,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Zimbra Collaboration Suite Security Vulnerabilities","Security vulnerabilities affecting Zimbra Collaboration Suite by Synacor",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":433,"apiVersion":434},"2026-10-18T15:53:01.964Z","3.0",[],{"rows":437,"total":599,"capped":17,"failed":16},[438,444,455,502,540,546,573,577,581,586],{"cveId":367,"name":371,"severity":319,"cvss":318,"added":372,"epss":370,"published":439,"ranges":440,"checked":4,"hits":443,"covers":17},"2026-01-05T15:15:44.903",[441,442],"10.0.0 to before 10.0.18","10.1.0 to before 10.1.13",[],{"cveId":334,"name":376,"severity":312,"cvss":310,"added":377,"epss":337,"published":445,"ranges":446,"checked":4,"hits":454,"covers":17},"2020-02-18T22:15:10.013",[447,189,448,449,450,451,452,453],"before 8.8.15","8.8.15-p1","8.8.15-p2","8.8.15-p3","8.8.15-p4","8.8.15-p5","8.8.15-p6",[],{"cveId":339,"name":380,"severity":319,"cvss":324,"added":381,"epss":342,"published":456,"ranges":457,"checked":4,"hits":501,"covers":17},"2019-04-30T18:29:08.633",[458,147,459,460,461,462,463,464,465,466,467,468,469,470,471,158,472,473,474,475,476,477,478,479,480,481,482,206,483,484,485,486,487,488,489,490,491,181,492,493,494,495,496,497,184,498,499,500],"before 8.6.0","8.6.0-patch1","8.6.0-patch2","8.6.0-patch3","8.6.0-patch4","8.6.0-patch5","8.6.0-patch6","8.6.0-patch7","8.6.0-patch8","8.6.0-patch9","8.6.0-patch10","8.6.0-patch11","8.6.0-patch12","8.7.0 to before 8.7.11","8.7.11-patch1","8.7.11-patch2","8.7.11-patch3","8.7.11-patch4","8.7.11-patch5","8.7.11-patch6","8.7.11-patch7","8.7.11-patch8","8.7.11-patch9","8.7.11-patch10","8.8.0 to before 8.8.9","8.8.9-p5","8.8.9-patch1","8.8.9-patch2","8.8.9-patch3","8.8.9-patch4","8.8.9-patch6","8.8.9-patch7","8.8.9-patch8","8.8.9-patch9","8.8.10-patch1","8.8.10-patch2","8.8.10-patch3","8.8.10-patch4","8.8.10-patch6","8.8.10-patch7","8.8.11-patch1","8.8.11-patch2","8.8.11-patch3",[],{"cveId":344,"name":384,"severity":312,"cvss":11,"added":385,"epss":347,"published":503,"ranges":504,"checked":4,"hits":539,"covers":17},"2023-07-06T16:15:10.047",[189,448,449,450,451,452,453,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538],"8.8.15-p7","8.8.15-p8","8.8.15-p9","8.8.15-p10","8.8.15-p11","8.8.15-p12","8.8.15-p13","8.8.15-p14","8.8.15-p15","8.8.15-p16","8.8.15-p17","8.8.15-p18","8.8.15-p19","8.8.15-p20","8.8.15-p21","8.8.15-p22","8.8.15-p23","8.8.15-p24","8.8.15-p25","8.8.15-p26","8.8.15-p27","8.8.15-p28","8.8.15-p29","8.8.15-p30","8.8.15-p31","8.8.15-p31.1","8.8.15-p32","8.8.15-p33","8.8.15-p34","8.8.15-p35","8.8.15-p36","8.8.15-p37","8.8.15-p38","8.8.15-p39",[],{"cveId":349,"name":384,"severity":331,"cvss":352,"added":388,"epss":353,"published":541,"ranges":542,"checked":4,"hits":545,"covers":17},"2023-07-31T16:15:10.327",[543,450,452,509,524,528,529,531,532,533,534,536,537,544],"8.8.0 to before 8.8.15","8.8.15-p40",[],{"cveId":392,"name":384,"severity":331,"cvss":352,"added":395,"epss":394,"published":547,"ranges":548,"checked":4,"hits":572,"covers":17},"2022-04-21T00:15:08.45",[208,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571],"9.0.0-p1","9.0.0-p2","9.0.0-p3","9.0.0-p4","9.0.0-p5","9.0.0-p6","9.0.0-p7","9.0.0-p8","9.0.0-p9","9.0.0-p10","9.0.0-p11","9.0.0-p12","9.0.0-p13","9.0.0-p14","9.0.0-p15","9.0.0-p16","9.0.0-p17","9.0.0-p18","9.0.0-p19","9.0.0-p20","9.0.0-p21","9.0.0-p22","9.0.0-p23",[],{"cveId":315,"name":399,"severity":319,"cvss":318,"added":400,"epss":320,"published":574,"ranges":575,"checked":4,"hits":576,"covers":17},"2022-04-21T00:15:08.407",[189,448,449,450,451,452,453,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,208,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571],[],{"cveId":322,"name":403,"severity":319,"cvss":324,"added":404,"epss":325,"published":578,"ranges":579,"checked":4,"hits":580,"covers":17},"2022-04-21T00:15:08.36",[189,448,449,450,451,452,453,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,208,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571],[],{"cveId":361,"name":384,"severity":331,"cvss":352,"added":407,"epss":364,"published":582,"ranges":583,"checked":4,"hits":585,"covers":17},"2018-03-27T16:29:00.53",[584,152,177,179,191,193,195,197,199],"before 8.7.0",[],{"cveId":307,"name":410,"severity":312,"cvss":310,"added":411,"epss":313,"published":587,"ranges":588,"checked":4,"hits":598,"covers":17},"2019-05-29T22:29:01.507",[471,158,589,590,591,592,593,594,595,596,597],"8.7.11-p1","8.7.11-p2","8.7.11-p3","8.7.11-p4","8.7.11-p5","8.7.11-p6","8.7.11-p7","8.7.11-p8","8.7.11-p9",[],10]