Skip to content
COOEY

FAIL › dossier

Zimbra Collaboration Suite

PRODUCT

· dossier confidence 80%

Zimbra Collaboration Suite suffers from a relentless stream of critical and high-severity vulnerabilities, many remaining unpatched long enough to be actively exploited by ransomware campaigns.

Failure events
3
Zero-days
0
RCEs
1
On KEV
1
Critical
2
Worst shame
72
PROFILE
Categorycollaboration suiteWhat they doZimbra Collaboration Suite is an email and collaboration platform.
SECURITY POSTURE

Chronic vulnerability management failure with critical RCEs, XSS, and SSRF flaws remaining unpatched

Notable failures
  • CVE-2020-7796 SSRF RCE
  • CVE-2022-37042 mboximport RCE
Patterns: repeated unpatched edge-device RCEs; critical RCEs, XSS, and SSRF flaws remaining unpatched
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-02-17 CVE-2020-7796 high Synacor's Zimbra Collaboration Suite left vulnerable to SSRF, exploited in the wild
2022-09-26 CVE-2022-41352 critical CVE-2022-41352: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacke
2022-08-12 CVE-2022-37042 critical CVE-2022-37042: Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality tha
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-04 03:51:31.150047+00:00