Zimbra
Security Risk Profile
39
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 106 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 10, 2008 to present
106
Total CVEs
33
Critical+High
17
Exploited
29
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
29
Critical/High
Risk Level
39/100
low
⚠️ 17 Active Exploits⚡ 6 Zero-Days📈 1 in Last 30 Days
Severity Distribution
Critical
11High
22Medium
65Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
10Age Distribution
Common Weaknesses (CWE)
1
XSS
52
2
CSRF
10
3
SSRF
6
4
Command Injection
4
5
Input Validation
4
Most Affected Products
1. Zimbra Collaboration1560
2. Synacor Zimbra Collaboration Suite1127
3. Zimbra Zimbra74
4. Zimbra Collaboration Server67
5. Zimbra Zimbra Collaboration Suite24
Recent Vulnerabilities
See more →bleepingcomputer-20260710114738
unknown
Zimbra urges customers to patch critical web client XSS flaw
7/10/2026⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2026-33373
CVSS 8.8high
3/30/2026🔧 No Patch
CVE-2025-71275
CVSS 9.3critical
Zimbra Collaboration Suite PostJournal 8.8.15 Unauthenticated Remote Code Execution via SMTP Injection
3/24/2026🔧 No Patch
CVE-2026-33370
CVSS 6.1EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33371
CVSS 4.3EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33369
CVSS 4.3EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33372
CVSS 5.4EPSS 0%medium
3/20/2026🔧 No Patch
CVE-2026-33368
CVSS 6.1EPSS 0%medium
3/20/2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-confirms-active-exploitation-of-four-enterprise-software-bugs/
unknown
CISA confirms active exploitation of four enterprise software bugs
1/23/2026⚠ Exploited🔧 No Patch
CVE-2025-68645
CVSS 8.8high
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
12/22/2025⚠ Exploited🔧 No Patch
Monitor Zimbra in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.