Skip to content
OpenAdvisories

Vendor

Synacor

4 known vulnerabilities.

Products

Zimbra Collaboration 2 Zimbra Server 1 Zimbra Collaboration Suite (ZCS) 1 zimbra_collaboration_server 0 zimbra_collaboration_suite 0 Zimbra 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-66912

    Stored Cross-Site Scripting in Zimbra

    Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Classic UI. Due to insufficient sanitization of the From header value, a remote attacker can send a crafted email containing a malicious From …

    Synacor Zimbra Collaboration
  • Medium 5.3
    CVE-2026-66911

    Stored Cross-Site Scripting in Zimbra

    Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header, an attacker can set it to a javascript: URI. An unauthenticated remote attacker ca…

    Synacor Zimbra Collaboration