CVE security advisories and vulnerability history for zm-build by zimbra.
107
Total CVEs
Published
18
In CISA KEV
Exploited in the wild
23
Public exploits
PoC or exploit code
6.8
Avg CVSS
2017–2026
Last updated
Overview
zimbra zm-build has 107 published CVE records since 2017, of which 18 are in CISA's Known Exploited Vulnerabilities catalog and 23 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.
This page aggregates every publicly disclosed vulnerability (CVE) affecting zimbra zm-build, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of zimbra zm-build's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical16
High21
Medium70
Low0
In CISA’s Known Exploited Vulnerabilities catalog
18
18 of zimbra zm-build's CVEs are confirmed exploited in the wild.
Public exploits
23
23 of zimbra zm-build's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every zimbra zm-build version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about zimbra zm-build vulnerabilities.
How many CVEs does zimbra zm-build have?
zimbra zm-build has 107 published CVE records since 2017.
How many zimbra zm-build CVEs are in CISA KEV?
Yes — 18 of zimbra zm-build's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for zimbra zm-build vulnerabilities?
Yes — 23 of zimbra zm-build's CVEs have a known public exploit.
Which versions of zimbra zm-build are affected?
291 distinct zimbra zm-build versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in zimbra zm-build CVEs?
zimbra zm-build's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical zimbra zm-build vulnerabilities are there?
zimbra zm-build has 16 critical and 21 high-severity CVEs.
What is the average severity of zimbra zm-build CVEs?
The average CVSS base score across zimbra zm-build's scored CVEs is 6.8.