Synacor: exploited vulnerabilities
- 19exploited vulnerabilities
- 6used by ransomware
- Aug 21, 2026latest one added
- Zimbra Collaboration Suite (ZCS) 16
- Zimbra Collaboration Suite 1
- Zimbra Collaboration Suite (ZCS) 1
- Zimbra Collaborate Suite (ZCS) 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 21, 2026 | OS Command Injection | Zimbra Collaboration Suite (ZCS) | High 8.9 | 72% |
| Apr 20, 2026 | Cross-site Scripting | Zimbra Collaboration Suite (ZCS) | Medium 6.1 | 1.7% |
| Mar 18, 2026 | Cross-Site Scripting | Zimbra Collaboration Suite (ZCS) | High 7.2 | 20% |
| Feb 17, 2026 | (ZCS) Server-Side Request Forgery | Zimbra Collaboration Suite | Critical 9.8 | 94% |
| Jan 22, 2026 | Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion | Zimbra Collaboration Suite (ZCS) | High 8.8 | 49% |
| Oct 7, 2025 | Cross-site Scripting | Zimbra Collaboration Suite (ZCS) | Medium 5.4 | 4.1% |
| Jul 7, 2025 | Server-Side Request Forgery (SSRF) | Zimbra Collaboration Suite (ZCS) | High 7.5 | 81% |
| May 19, 2025 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | Medium 6.1 | 25% |
| Feb 25, 2025 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | Critical 9.0 | 77% |
| Oct 3, 2024 | Command Execution | Zimbra Collaboration Suite (ZCS) | Critical 10.0 | 99.9% |
| Jul 27, 2023 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | Medium 6.1 | 49% |
| Apr 3, 2023 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | Medium 6.1 | 18% |
| Oct 20, 2022 | Arbitrary File Upload | Zimbra Collaboration Suite (ZCS) | Critical 9.8 | 95% |
| Aug 11, 2022 | Authentication Bypass | Zimbra Collaboration Suite (ZCS) | Critical 9.8 | 92% |
| Aug 11, 2022 | Arbitrary File Upload | Zimbra Collaboration Suite (ZCS) | High 7.2 | 99% |
| Aug 4, 2022 | Command Injection | Zimbra Collaboration Suite (ZCS) | Critical 9.8 | 94% |
| Apr 19, 2022 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | Medium 6.1 | 30% |
| Feb 25, 2022 | Cross-Site Scripting | Zimbra Collaborate Suite (ZCS) | Medium 6.1 | 31% |
| Jan 10, 2022 | Improper Restriction of XML External Entity Reference | Zimbra Collaboration Suite (ZCS) | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.