Zimbra Zimbra Collaboration Server — known CVE vulnerabilities

Every CVE whose affected-product data names Zimbra Zimbra Collaboration Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-6541 — CVSS 8.8 (high): Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow…
• CVE-2016-5721 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web…