Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Zimbra — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Zimbra. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Zimbra serves as a collaborative email and calendaring platform, primarily used by organizations for unified communication. Historically, it has been susceptible to various vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws and insecure default configurations. The platform's complex architecture and extensive feature set have contributed to security challenges, with past incidents involving unauthorized access and data breaches. Despite these issues, Zimbra remains widely deployed, necessitating regular security updates and hardening to mitigate risks associated with its known CVE history.

CVE ID Title CVSS Severity Published
CVE-2026-93647 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address — Zimbra Collaboration Suite (ZCS) CWE-79 9.3 Critical 2026-09-25
CVE-2026-93643 Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request — Zimbra Collaboration Suite (ZCS) CWE-22 9.8 Critical 2026-09-25
CVE-2026-93642 Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation — Zimbra Collaboration Suite (ZCS) CWE-79 9.3 Critical 2026-09-25
CVE-2026-93641 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation — Zimbra Collaboration Suite (ZCS) CWE-79 9.3 Critical 2026-09-25
CVE-2026-73576 Zimbra <10.1.17 OnlyOffice弱密钥生成致JWT伪造 — Collaboration CWE-1241 6.3 Medium 2026-08-13
CVE-2026-73575 ZCS<10.1.17 CSRF漏洞 — Collaboration CWE-352 3.1 Low 2026-08-13
CVE-2026-73574 Zimbra<10.1.17经典Web客户端LFI漏洞 — Collaboration CWE-669 3.1 Low 2026-08-13
CVE-2026-73573 Zimbra Collaboration <10.1.17 路径穿越漏洞 — Collaboration CWE-24 3.1 Low 2026-08-13
CVE-2026-73572 Zimbra <10.1.17 存储型XSS漏洞 — Collaboration CWE-79 6.1 Medium 2026-08-13
CVE-2026-73571 Zimbra Collaboration <10.1.17 授权绕过漏洞 — Collaboration CWE-863 3.1 Low 2026-08-13
CVE-2026-73570 Zimbra Collaboration 命令注入漏洞 — Collaboration CWE-78 8.9 High 2026-08-13
CVE-2025-66376 Zimbra Collaboration 跨站脚本漏洞 — Collaboration CWE-79 7.2 High 2026-01-05
CVE-2025-62763 Zimbra Collaboration 代码问题漏洞 — Collaboration CWE-918 5.0 Medium 2025-10-21
CVE-2024-9665 Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability — Zimbra CWE-352 6.5 - 2024-11-22
CVE-2017-20191 Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting — zm-admin-ajax CWE-79 3.5 Low 2024-03-31
CVE-2017-20188 Zimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scripting — zm-ajax CWE-79 2.6 Low 2024-01-02
CVE-2013-1938 Zimbra aspell.php 跨站脚本漏洞 — Zimbra 6.1 - 2020-02-12

This page lists every published CVE security advisory associated with Zimbra. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.