Skip to content
Noroxi

Zimbra records

59 published records for vendor zimbra.

Researcher profile

Entered KEV
1 · 1.7%
Weaponized
2 · 3.4%
Pre-auth RCE
6
With a fix record
8.5%
Median publish → KEV
280 days

Records by year

  1. 18
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

59 records
  • CVE-2024-27443
    61This week

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

    MediumCVSS 6.1KEVWeaponizedEPSS 24%

    zimbra · collaborationAug 12, 2024

  • CVE-2024-45518
    41Plan

    An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before P

    HighCVSS 8.8No exploitEPSS 20%

    zimbra · collaborationOct 22, 2024

  • CVE-2013-7217
    41Plan

    Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified v

    CriticalCVSS 10.0No exploitEPSS 2%

    zimbra · collaboration serverDec 26, 2013

  • CVE-2021-35209
    40Plan

    An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9

    CriticalCVSS 9.8No exploitEPSS 2%

    zimbra · collaborationJul 2, 2021

  • CVE-2022-32294
    40Plan

    Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command).

    CriticalCVSS 9.8No exploitEPSS 2%

    zimbra · collaborationJul 10, 2022

  • CVE-2022-37393
    40Plan

    Zimbra zmslapd arbitrary module load

    HighCVSS 7.8WeaponizedEPSS 1%

    zimbra · collaborationAug 16, 2022

  • CVE-2023-29381
    39Monitor

    An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information v

    CriticalCVSS 9.8No exploitEPSS 1%

    zimbra · collaborationJul 6, 2023

  • CVE-2023-29382
    39Monitor

    An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.

    CriticalCVSS 9.8No exploitEPSS 1%

    zimbra · collaborationJul 6, 2023

  • CVE-2015-6541
    36Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remot

    HighCVSS 8.8Proof of conceptEPSS 2%

    zimbra · zimbra collaboration serverApr 8, 2016

  • CVE-2015-7610
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x befor

    HighCVSS 8.8No exploitEPSS 1%

    zimbra · zimbra collaboration suiteMay 30, 2018

  • CVE-2023-34193
    35Monitor

    File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive inform

    HighCVSS 8.8No exploitEPSS 1%

    zimbra · collaborationJul 6, 2023

  • CVE-2023-24032
    31Monitor

    In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute comm

    HighCVSS 7.8No exploitEPSS 0%

    zimbra · collaborationJun 15, 2023

  • CVE-2022-41347
    31Monitor

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15).

    HighCVSS 7.8No exploitEPSS 0%

    zimbra · collaborationSep 25, 2022

  • CVE-2024-27442
    31Monitor

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

    HighCVSS 7.8No exploitEPSS 0%

    zimbra · collaborationAug 12, 2024

  • CVE-2023-41106
    30Monitor

    An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3.

    HighCVSS 7.5No exploitEPSS 1%

    zimbra · collaborationDec 7, 2023

  • CVE-2023-38750
    30Monitor

    In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exp

    HighCVSS 7.5No exploitEPSS 0%

    zimbra · zimbraJul 31, 2023

  • CVE-2022-37041
    30Monitor

    An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0.

    HighCVSS 7.5No exploitEPSS 0%

    zimbra · collaborationAug 12, 2022

  • CVE-2024-33535
    30Monitor

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

    HighCVSS 7.5No exploitEPSS 0%

    zimbra · collaborationAug 12, 2024

  • CVE-2022-45912
    28Monitor

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0.

    HighCVSS 7.2No exploitEPSS 1%

    zimbra · collaborationDec 5, 2022

  • CVE-2020-35123
    26Monitor

    In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer st

    MediumCVSS 6.5No exploitEPSS 1%

    zimbra · collaborationDec 17, 2020

  • CVE-2020-10194
    26Monitor

    cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account.

    MediumCVSS 6.5No exploitEPSS 1%

    zimbra · zm-mailboxMar 20, 2020

  • CVE-2023-26562
    26Monitor

    In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messages when configured f

    MediumCVSS 6.5No exploitEPSS 0%

    zimbra · collaborationFeb 13, 2024

  • CVE-2024-9665
    26Monitor

    Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    zimbra · zimbraNov 22, 2024

  • CVE-2021-35207
    25Monitor

    An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16.

    MediumCVSS 6.1No exploitEPSS 3%

    zimbra · collaborationJul 2, 2021

  • CVE-2013-1938
    25Monitor

    Zimbra 2013 has XSS in aspell.php

    MediumCVSS 6.1Proof of conceptEPSS 3%

    zimbra · zimbraFeb 12, 2020