PatchTheCVEzimbra vulnerabilities
Recent CVEs affecting zimbra products. 9 tracked.
zimbra has 9 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 9. Most recent: 2025-12-15. Highest priority: CVE-2024-27443 (score 71/100).
- CVE-2025-67809 MEDIUM 4.7 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1
- CVE-2025-27914 MEDIUM 5.4 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1
- CVE-2024-9665 MEDIUM 6.5 UPGRADE Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability
- CVE-2024-45515 MEDIUM 6.1 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) through 10.1
- CVE-2024-33536 MEDIUM 5.4 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0
- CVE-2024-33535 HIGH 7.5 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0
- CVE-2024-33533 MEDIUM 5.4 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2
- CVE-2024-27443 MEDIUM 6.1 EXPLOITED UPGRADE Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
- CVE-2024-27442 HIGH 7.8 UPGRADE An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0
FAQ
How do I fix zimbra vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zimbra being exploited right now?
Yes: 1 zimbra CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which zimbra CVE should I patch first?
CVE-2024-27443 currently ranks highest (71/100): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability.