Advisories · Technology
Zimbra Collaboration Suite (ZCS).
Every CVE that names Zimbra Collaboration Suite (ZCS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address
- Zimbra Collaboration Suite (ZCS)
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request
- Zimbra Collaboration Suite (ZCS)
- Path traversal
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation
- Zimbra Collaboration Suite (ZCS)
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation
- Zimbra Collaboration Suite (ZCS)
- Cross-site scripting (XSS)