en
Severity across 13 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 71 vulnerability records associated with Zimbra.
Among the 13 records analyzed by CyStack, 2 are High or Critical and 2 appear in the CISA KEV catalog for priority remediation.
The list below is based on vulnerabilities that have been viewed and analyzed; it does not represent the complete global vulnerability corpus. Use the product filter to narrow the scope.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-73576CVE-2026-73576 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityMedium |
CVE-2026-73575CVE-2026-73575 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityLow |
CVE-2026-73574CVE-2026-73574 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityLow |
CVE-2026-73573CVE-2026-73573 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityLow |
CVE-2026-73572CVE-2026-73572 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityMedium |
CVE-2026-73571CVE-2026-73571 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityLow |
CVE-2026-73570CVE-2026-73570 | Exploitation statusKEV | FixYes | Affected productCollaboration | Published08/13/2026 | SeverityHigh |
CVE-2025-71275CVE-2025-71275 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/24/2026 | SeverityUnknown |
CVE-2025-66376CVE-2025-66376 | Exploitation statusKEV | FixYes | Affected productCollaboration | Published01/05/2026 | SeverityHigh |
CVE-2025-68645CVE-2025-68645 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published12/22/2025 | SeverityHigh |
CVE-2025-67809CVE-2025-67809 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/15/2025 | SeverityMedium |
CVE-2025-62763CVE-2025-62763 | Exploitation statusNot known exploited | FixYes | Affected productCollaboration | Published10/21/2025 | SeverityMedium |
CVE-2024-45515CVE-2024-45515 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/30/2025 | SeverityMedium |
CVE-2025-27914CVE-2025-27914 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/12/2025 | SeverityMedium |
CVE-2024-9665Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productZimbra | Published11/22/2024 | SeverityMedium |
CVE-2024-45518CVE-2024-45518 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/22/2024 | SeverityHigh |
CVE-2024-27442CVE-2024-27442 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/12/2024 | SeverityHigh |
CVE-2024-33533CVE-2024-33533 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/12/2024 | SeverityMedium |
CVE-2024-27443CVE-2024-27443 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published08/12/2024 | SeverityMedium |
CVE-2024-33535CVE-2024-33535 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/12/2024 | SeverityHigh |
CVE-2024-33536CVE-2024-33536 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/12/2024 | SeverityMedium |
CVE-2017-20191Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting | Exploitation statusNot known exploited | FixYes | Affected productzm-admin-ajax | Published03/31/2024 | SeverityLow |
CVE-2023-45206CVE-2023-45206 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/13/2024 | SeverityMedium |
CVE-2023-48432CVE-2023-48432 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/13/2024 | SeverityMedium |
CVE-2023-45207CVE-2023-45207 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/13/2024 | SeverityMedium |
CVE-2023-50808CVE-2023-50808 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/13/2024 | SeverityCritical |
CVE-2023-26562CVE-2023-26562 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/13/2024 | SeverityMedium |
CVE-2017-20188Zimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scripting | Exploitation statusNot known exploited | FixYes | Affected productzm-ajax | Published01/02/2024 | SeverityLow |
CVE-2023-43103CVE-2023-43103 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published12/07/2023 | SeverityUnknown |
CVE-2023-43102CVE-2023-43102 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published12/07/2023 | SeverityUnknown |
CVE-2023-41106CVE-2023-41106 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published12/07/2023 | SeverityUnknown |
CVE-2023-38750CVE-2023-38750 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/31/2023 | SeverityUnknown |
CVE-2023-34193CVE-2023-34193 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/06/2023 | SeverityUnknown |
CVE-2023-29382CVE-2023-29382 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/06/2023 | SeverityUnknown |
CVE-2023-29381CVE-2023-29381 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/06/2023 | SeverityUnknown |
CVE-2023-24030CVE-2023-24030 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published06/15/2023 | SeverityUnknown |
CVE-2023-24031CVE-2023-24031 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published06/15/2023 | SeverityUnknown |
CVE-2023-24032CVE-2023-24032 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published06/15/2023 | SeverityUnknown |
CVE-2022-45911CVE-2022-45911 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/06/2023 | SeverityMedium |
CVE-2022-45913CVE-2022-45913 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/06/2023 | SeverityMedium |
CVE-2022-45912CVE-2022-45912 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/05/2022 | SeverityHigh |
CVE-2022-41349CVE-2022-41349 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/12/2022 | SeverityMedium |
CVE-2022-41348CVE-2022-41348 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/12/2022 | SeverityMedium |
CVE-2022-41350CVE-2022-41350 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/12/2022 | SeverityMedium |
CVE-2022-41351CVE-2022-41351 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/12/2022 | SeverityMedium |
CVE-2022-41347CVE-2022-41347 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/26/2022 | SeverityHigh |
CVE-2022-37393Zimbra zmslapd arbitrary module load | Exploitation statusNot confirmed | FixNot confirmed | Affected productZimbra Server | Published08/16/2022 | SeverityUnknown |
CVE-2022-37044CVE-2022-37044 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/11/2022 | SeverityUnknown |
CVE-2022-37043CVE-2022-37043 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/11/2022 | SeverityUnknown |
CVE-2022-37041CVE-2022-37041 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/11/2022 | SeverityUnknown |
CVE-2022-32294CVE-2022-32294 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/11/2022 | SeverityUnknown |
CVE-2021-35207CVE-2021-35207 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/02/2021 | SeverityUnknown |
CVE-2021-35208CVE-2021-35208 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/02/2021 | SeverityUnknown |
CVE-2021-35209CVE-2021-35209 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/02/2021 | SeverityUnknown |
CVE-2021-34807CVE-2021-34807 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/02/2021 | SeverityUnknown |
CVE-2020-35123CVE-2020-35123 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-11737CVE-2020-11737 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published05/05/2020 | SeverityUnknown |
CVE-2020-10194CVE-2020-10194 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/20/2020 | SeverityUnknown |
CVE-2013-1938CVE-2013-1938 | Exploitation statusNot confirmed | FixNot confirmed | Affected productZimbra | Published02/12/2020 | SeverityUnknown |
CVE-2019-8945CVE-2019-8945 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/27/2020 | SeverityUnknown |
CVE-2019-8946CVE-2019-8946 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/27/2020 | SeverityUnknown |
CVE-2019-8947CVE-2019-8947 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/27/2020 | SeverityUnknown |
CVE-2019-12427CVE-2019-12427 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/27/2020 | SeverityUnknown |
CVE-2019-15313CVE-2019-15313 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/27/2020 | SeverityUnknown |
CVE-2018-10939CVE-2018-10939 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/30/2018 | SeverityUnknown |
CVE-2015-7610CVE-2015-7610 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/30/2018 | SeverityUnknown |
CVE-2016-5721CVE-2016-5721 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/29/2016 | SeverityUnknown |
CVE-2015-6541CVE-2015-6541 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/08/2016 | SeverityUnknown |
CVE-2013-7217CVE-2013-7217 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2013 | SeverityUnknown |
CVE-2012-1213CVE-2012-1213 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/20/2012 | SeverityUnknown |
CVE-2008-1226CVE-2008-1226 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/10/2008 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
