Zimbra Collaboration Server — known CVE vulnerabilities

Every CVE whose affected-product data names Zimbra Collaboration Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2013-7217 — CVSS 10.0 (critical): Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified…
• CVE-2019-15313 — CVSS 6.1 (medium): In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.
• CVE-2019-8945 — CVSS 6.1 (medium): Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
• CVE-2019-8946 — CVSS 6.1 (medium): Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
• CVE-2019-8947 — CVSS 6.1 (medium): Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.
• CVE-2019-12427 — CVSS 4.8 (medium): Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.