Skip to content
OpenAdvisories
High WID-SEC-2026-0388 5 CVEs

Synacor Zimbra: Mehrere Schwachstellen

Published Feb 10, 2026 · Updated Mar 22, 2026 · Revision 4 · de-DE

Vendor: Synacor Product: Zimbra Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Informationen offenzulegen.

Product

Zimbra ist eine Groupware-Lösung, die E-Mail, Kalender und Aufgabenverwaltung bietet.

Vulnerabilities 5

  • Medium 6.1
    CVE-2026-33368

    Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Cla…

  • Medium 6.1
    CVE-2026-33370

    An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability …

  • Medium 5.4
    CVE-2026-33372

    An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability …

  • Medium 4.3
    CVE-2026-33369

    Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a …

  • Medium 4.3
    CVE-2026-33371

    An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. An XML External Entity (XXE) vulnerability exists …

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-13690, EUVD-2026-13692, EUVD-2026-13694, EUVD-2026-13696, EUVD-2026-13698

  2. #3

    CVE Nummern ergänzt

  3. #2

    CVE-2026-33368 ergänzt

  4. #1

    Initiale Fassung

References