Vulnerabilità per vendor · aggiornato a ogni pubblicazione
Vulnerabilità Zimbra: CVE sfruttate e nostre analisi
Zimbra ha 19 vulnerabilità nel catalogo CISA Known Exploited Vulnerabilities, 5 delle quali aggiunte negli ultimi 12 mesi e 6 note per l'uso in campagne ransomware. Qui sotto: l'analisi pubblicata da Zero Hunt Research sui prodotti Zimbra, poi le voci del catalogo dalla più recente, con la scadenza federale.
Catalogo CISA versione 2026.10.21, pubblicato il 2026-10-21 14:04 UTC.
19
CVE in CISA KEV
5
Aggiunte negli ultimi 12 mesi
6
Uso noto nel ransomware
1
Analisi Zero Hunt
Prodotti con più voci nel KEV: Zimbra Collaboration Suite (ZCS) (16) · Zimbra Collaboration Suite (ZCS) (1) · Zimbra Collaborate Suite (ZCS) (1) · Zimbra Collaboration Suite (1)
Le nostre analisi delle vulnerabilità Zimbra
2026-07-12
XSS nella webmail Zimbra: l'email che svuota la casellaGoogle TAG ha segnalato una stored XSS nel Classic Web Client di Zimbra, corretta in ZCS 10.1.19. Nessun CVE, nessun CVSS — e l'email malevola non è la parte che intercetterai. Ecco il runbook.
Tutte le 19 voci KEV
| Aggiunta | CVE | Prodotto e vulnerabilità | Scadenza federale | Segnalazioni | Nostra analisi |
|---|---|---|---|---|---|
| 2026-08-21 | CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating… | 2026-08-24 | Triage forense | — |
| 2026-04-20 | CVE-2025-48700 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access t… | 2026-04-23 | — | |
| 2026-03-18 | CVE-2025-66376 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML. | 2026-04-01 | — | |
| 2026-02-17 | CVE-2020-7796 | Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled. | 2026-03-10 | — | |
| 2026-01-22 | CVE-2025-68645 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, al… | 2026-02-12 | — | |
| 2025-10-07 | CVE-2025-27915 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail m… | 2025-10-28 | — | |
| 2025-07-07 | CVE-2019-9621 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component. | 2025-07-28 | — | |
| 2025-05-19 | CVE-2024-27443 | Zimbra Collaboration Suite (ZCS) Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message cont… | 2025-06-09 | — | |
| 2025-02-25 | CVE-2023-34192 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. | 2025-03-18 | — | |
| 2024-10-03 | CVE-2024-45519 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands. | 2024-10-24 | — | |
| 2023-07-27 | CVE-2023-37580 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data. | 2023-08-17 | — | |
| 2023-04-03 | CVE-2022-27926 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing. | 2023-04-24 | — | |
| 2022-10-20 | CVE-2022-41352 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts. | 2022-11-10 | Ransomware | — |
| 2022-08-11 | CVE-2022-37042 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution. | 2022-09-01 | Ransomware | — |
| 2022-08-11 | CVE-2022-27925 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained wit… | 2022-09-01 | Ransomware | — |
| 2022-08-04 | CVE-2022-27924 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries. | 2022-08-25 | Ransomware | — |
| 2022-04-19 | CVE-2018-6882 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML. | 2022-05-10 | Ransomware | — |
| 2022-02-25 | CVE-2022-24682 | Zimbra Collaborate Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code. | 2022-03-11 | Ransomware | — |
| 2022-01-10 | CVE-2019-9670 | Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component. | 2022-07-10 | — |
Fonte: catalogo CISA Known Exploited Vulnerabilities (dati pubblici). Le descrizioni sono di CISA, abbreviate. Verifica sempre l'advisory del vendor prima di intervenire. cisa.gov
Prima della patch: tre verifiche
- 01Confronta la versione e la configurazione esatte che usi con l'advisory del vendor. Avere il prodotto non significa essere esposti.
- 02Verifica la raggiungibilità: una falla sfruttata su un'interfaccia raggiungibile da internet, o da una postazione compromessa, passa in testa alla coda.
- 03Dove CISA indica il triage forense, oltre alla patch cerca tracce di compromissione: la correzione non elimina un attaccante entrato prima.
Domande
Quante vulnerabilità Zimbra ci sono nel catalogo CISA KEV?
19 nella versione 2026.10.21 del catalogo, la prima aggiunta il 2022-01-10 e la più recente il 2026-08-21. 5 sono state aggiunte negli ultimi 12 mesi.
Quali prodotti Zimbra hanno più vulnerabilità sfruttate?
Per numero di voci KEV: Zimbra Collaboration Suite (ZCS) (16), Zimbra Collaboration Suite (ZCS) (1), Zimbra Collaborate Suite (ZCS) (1), Zimbra Collaboration Suite (1).
Le vulnerabilità Zimbra sono usate negli attacchi ransomware?
CISA indica 6 delle 19 voci Zimbra come note per l'uso in campagne ransomware. Nella tabella sono segnalate.
La prossima CVE Zimbra è sfruttabile nella tua rete?
Una voce KEV dice che una vulnerabilità è sfruttata da qualche parte. Zero Hunt risponde se è sfruttabile nel tuo ambiente: un red team AI autonomo su un'appliance on-premise, con AI privata, in black box o gray box e con una persona che approva ogni passo che conta.
Altri vendor: Cisco · Microsoft · Fortinet · Linux kernel · Citrix · GitLab · Adobe · Palo Alto Networks · Check Point · Langflow · Arista · Oracle · SonicWall · Ivanti · VMware · SAP · Atlassian · Zyxel · Progress · F5