How many Zimbra Collaboration Suite CVEs are in CISA KEV?

1 of Zimbra Collaboration Suite's CVEs is listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Zimbra Collaboration Suite are affected?

11 distinct Zimbra Collaboration Suite versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Zimbra Collaboration Suite CVEs?

Zimbra Collaboration Suite's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-290 (Authentication Bypass by Spoofing), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-352 (Cross-Site Request Forgery (CSRF)).

What is the average severity of Zimbra Collaboration Suite CVEs?

The average CVSS base score across Zimbra Collaboration Suite's scored CVEs is 6.3.

Zimbra Collaboration Suite Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Zimbra Collaboration Suite vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

Zimbra Collaboration Suite has 25 published CVE records since 2018, of which 1 is in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

Severity and exploitation

How the CVSS severity of Zimbra Collaboration Suite's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High9

Medium15

Low1

In CISA’s Known Exploited Vulnerabilities catalog

One of Zimbra Collaboration Suite's CVEs is confirmed exploited in the wild.

Public exploits

6 of Zimbra Collaboration Suite's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Zimbra Collaboration Suite version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 10.1.219 CVEs
<= 10.1.206 CVEs
< 10.1.203 CVEs
<= 10.1.172 CVEs
< 10.1.171 CVE
< 10.1.211 CVE
8.6.01 CVE
8.8.81 CVE

Fixed in

10.1.203 CVEs

Common weakness types

The CWE weakness categories most often found in Zimbra Collaboration Suite CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Zimbra Collaboration Suite CVEs were published each year.

2018

2019

2020

2021

2022

2023

2024

Other Zimbra products

Browse vulnerabilities for other products by Zimbra.

zm-build114 CVEs Collaboration50 CVEs zm-mailbox19 CVEs zm-zcs-lib12 CVEs zm-zcs11 CVEs Zimbra Collaboration Suite (ZCS)7 CVEs collaboration server6 CVEs

Frequently asked questions

Common questions about Zimbra Collaboration Suite vulnerabilities.

How many CVEs does Zimbra Collaboration Suite have?: Zimbra Collaboration Suite has 25 published CVE records since 2018.
How many Zimbra Collaboration Suite CVEs are in CISA KEV?: 1 of Zimbra Collaboration Suite's CVEs is listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Zimbra Collaboration Suite vulnerabilities?: Yes — 6 of Zimbra Collaboration Suite's CVEs have a known public exploit.
Which versions of Zimbra Collaboration Suite are affected?: 11 distinct Zimbra Collaboration Suite versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Zimbra Collaboration Suite CVEs?: Zimbra Collaboration Suite's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-290 (Authentication Bypass by Spoofing), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-352 (Cross-Site Request Forgery (CSRF)).
What is the average severity of Zimbra Collaboration Suite CVEs?: The average CVSS base score across Zimbra Collaboration Suite's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Zimbra Collaboration Suite vulnerabilities

Get an alert for each new Zimbra Collaboration Suite CVE, with AI-written analysis and remediation steps.

Create an account See pricing