Class familySynacor · Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting flaws, 2018–2026

8 Zimbra Collaboration Suite (ZCS) CVEs with CWE-79 weaknesses, 27 Mar 2018 to 5 Jan 2026. 8 are in .

CVEs by year

Published each year. Select a CVE to open it.

Grouped by product and weakness type (CWE); not proven to share a root cause.

1 2018’18

2019’19

2020’20

2021’21

1 2022’22

2 2023’23

1 2024’24

2 2025’25

1 2026’26

In CISA KEVNot in KEV

Table view of the years above

CVE	Published	Title	Linked from	Priority
CVE-2018-6882KEV	27 Mar 2018	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	Grouped by weakness	76.9
CVE-2022-27926KEV	21 Apr 2022	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	Grouped by weakness	70.6
CVE-2023-34192KEV	6 Jul 2023	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	Grouped by weakness	69.2
CVE-2023-37580KEV	31 Jul 2023	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	Grouped by weakness	67.0
CVE-2024-27443KEV	12 Aug 2024	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	Grouped by weakness	66.8
CVE-2025-27915KEV	12 Mar 2025	Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability	Grouped by weakness	64.9
CVE-2025-48700KEV	23 Jun 2025	Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability	Grouped by weakness	62.7
CVE-2025-66376KEV	5 Jan 2026	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability	Grouped by weakness	66.8