PatchTheCVEcollaboration vulnerabilities and fixes
Recent CVEs affecting collaboration, with upgrade or downgrade steps. 8 tracked.
collaboration has 8 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 8. Most recent: 2025-12-15. Highest priority: CVE-2024-27443 (score 71/100).
- CVE-2025-67809 MEDIUM 4.7 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1
- CVE-2025-27914 MEDIUM 5.4 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1
- CVE-2024-45515 MEDIUM 6.1 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) through 10.1
- CVE-2024-33536 MEDIUM 5.4 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0
- CVE-2024-33535 HIGH 7.5 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0
- CVE-2024-33533 MEDIUM 5.4 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2
- CVE-2024-27443 MEDIUM 6.1 EXPLOITED UPGRADE Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
- CVE-2024-27442 HIGH 7.8 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0
FAQ
How do I fix collaboration vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is collaboration being exploited right now?
Yes: 1 collaboration CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which collaboration CVE should I patch first?
CVE-2024-27443 currently ranks highest (71/100): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability.