Skip to content
OpenAdvisories

Vendor

Zimbra

39 known vulnerabilities.

Products

Zimbra Collaboration Suite 22 Collaboration 9 Zimbra Collaboration Suite (ZCS) 4 Zimbra 2 zm-admin-ajax 1 zm-ajax 1 collaboration_suite 0 zimbra_collaboration 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-50055 Public exploit

    Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion

    A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.

    Zimbra Zimbra Collaboration Suite
  • High 8.9
    CVE-2026-73570 Exploited Public exploit EPSS 77%

    A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp…

    Zimbra Collaboration
    KEV Aug 21, 2026
  • Unscored —
    CVE-2013-1938 Public exploit

    Zimbra 2013 has XSS in aspell.php

    Zimbra Zimbra