Zimbra Collaboration Server Security Vulnerabilities

CVE-2014-8563

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during...

CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent...

CVE-2015-2249

Zimbra Collaboration before 8.6.0 patch5 has...

CVE-2014-5500

Synacor Zimbra Collaboration before 8.0.8 has...

CVE-2015-2230

Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin...

CVE-2016-5721

Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2015-6541

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to...