Vulnerabilities in Zimbra
6 resultsCVE-2025-66376HIGHZimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import dEPSS 12.0%KEVCVE-2013-1938—Zimbra 2013 has XSS in aspell.phpEPSS 3.3%CVE-2017-20191LOWZimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scriptingEPSS 0.5%CVE-2024-9665MEDIUMZimbra GraphQL Cross-Site Request Forgery Information Disclosure VulnerabilityEPSS 0.5%CVE-2017-20188LOWZimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scriptingEPSS 0.4%CVE-2025-62763MEDIUMZimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat proxy.EPSS 0.2%