Approved changes feed: RSS · Atom

cpe:2.3:a:zimbra:collaboration_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZimbra (2c2042e1-5f4a-5590-841f-bd7953d2bb5f)
ProductCollaboration Server (4208f23b-281c-5d03-a238-e9a6ad7b36fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zimbra/zm-build purl2cpe 2026-06-01 10:12:36.138558
pkg:sourceforge/zimbra purl2cpe 2026-06-01 10:12:36.138560

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9621 vulnerable 2026-06-08 05:14:25.812966 Details available
Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
Published: 2019-04-30T17:40:53.000Z
Updated: 2025-10-21T23:45:38.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8947 vulnerable 2026-06-08 05:14:24.735711 Details available
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.
Published: 2020-01-27T18:35:21.000Z
Updated: 2024-08-04T21:31:37.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8946 vulnerable 2026-06-08 05:14:24.735342 Details available
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
Published: 2020-01-27T18:36:20.000Z
Updated: 2024-08-04T21:31:37.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8945 vulnerable 2026-06-08 05:14:24.733504 Details available
Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
Published: 2020-01-27T18:37:11.000Z
Updated: 2024-08-04T21:31:37.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15313 vulnerable 2026-06-08 05:12:57.205270 Details available
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.
Published: 2020-01-27T18:20:27.000Z
Updated: 2024-08-05T00:42:03.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12427 vulnerable 2026-06-08 05:12:39.140036 Details available
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.
Published: 2020-01-27T18:21:57.000Z
Updated: 2024-08-04T23:17:40.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7217 vulnerable 2026-06-08 05:05:08.634879 Details available
Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified vectors, a different vulnerability than CVE-2013-7091.
Published: 2013-12-26T18:00:00.000Z
Updated: 2024-08-06T18:01:19.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.