All packages
Zimbra Collaboration (ZCS) vulnerabilities
3 known CVE vulnerabilities in Zimbra Collaboration (ZCS), translated and rated.
- CVE-2024-45519CriticalActively exploited
The postjournal service in Zimbra Collaboration (ZCS) before certain versions sometimes allows unauthenticated users to execute commands.
- CVE-2022-41352CriticalActively exploited
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio.
- CVE-2023-38750High
In Zimbra Collaboration (ZCS) versions 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, there is a risk of exposure of internal JSP and XML files.