Known Vulnerabilities for Collaboration Server by Zimbra
Listed below are 7 of the newest known vulnerabilities associated with "Collaboration Server" by "Zimbra".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102893 json | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches t... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-100687 json | Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to ... | Not Provided | 2026-09-26 | 2026-10-08 |
| CVE-2026-100404 json | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message e... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-58272 json | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 cont... | Not Provided | 2026-09-21 | 2026-09-23 |
| CVE-2026-58271 json | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POS... | Not Provided | 2026-09-21 | 2026-09-24 |
| CVE-2026-58270 json | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the ... | Not Provided | 2026-09-21 | 2026-09-22 |
| CVE-2026-58269 json | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POS... | Not Provided | 2026-09-21 | 2026-09-24 |
| CVE-2026-9589 json | Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 throu... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2019-15313 json | In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability. | 6.1 - MEDIUM | 2020-01-27 | 2020-01-29 |
| CVE-2019-12427 json | Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console. | 4.8 - MEDIUM | 2020-01-27 | 2020-01-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zimbra | Collaboration Server | 8.8.9 | |||
| Application | Zimbra | Collaboration Server | 8.8.9 | |||
| Application | Zimbra | Collaboration Server | 8.8.9 | |||
| Application | Zimbra | Collaboration Server | 8.8.9 | |||
| Application | Zimbra | Collaboration Server | 8.8.8 | |||
| Application | Zimbra | Collaboration Server | 8.8.8 | |||
| Application | Zimbra | Collaboration Server | 8.8.8 | |||
| Application | Zimbra | Collaboration Server | 8.8.8 | |||
| Application | Zimbra | Collaboration Server | 8.8.8 | |||
| Application | Zimbra | Collaboration Server | 8.8.7 | |||
| Application | Zimbra | Collaboration Server | 8.8.6 | |||
| Application | Zimbra | Collaboration Server | 8.8.4 | |||
| Application | Zimbra | Collaboration Server | 8.8.3 | |||
| Application | Zimbra | Collaboration Server | 8.8.2 | |||
| Application | Zimbra | Collaboration Server | 8.8.15 | |||
| Application | Zimbra | Collaboration Server | 8.8.15 | |||
| Application | Zimbra | Collaboration Server | 8.8.12 | |||
| Application | Zimbra | Collaboration Server | 8.8.12 | |||
| Application | Zimbra | Collaboration Server | 8.8.11.p3 | |||
| Application | Zimbra | Collaboration Server | 8.8.11 |