Back Hkcert

Zimbra Collaboration Suite Information Disclosure Vulnerability

Hkcert • April 21, 2026

A vulnerability has been identified in Zimbra Collaboration Suite. A remote attacker could exploit this vulnerability to trigger cross-site scripting and sensitive information disclosure the targeted system.

Prior to Version 10.0.12

Prior to Version 10.1.4

Prior to Version 8.8.15 Patch 47

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zimbra Collaboration Suite Vulnerability Disclosed A security vulnerability has been identified in Zimbra Collaboration Suite, affecting versions prior to 10.0.12, 10.1.4, and 8.8.15 Patch 47. This vulnerability allows remote attackers to exploit cross-site scripting (XSS) and potentially disclose sensitive information from the targeted system. Users of unsupported versions are also at risk, as they may share similar vulnerabilities. The vendor has released security advisories detailing the vulnerabilities and urging users to update to supported versions. It is critical for organizations using Zimbra to apply the latest patches to mitigate the risk. The vulnerability is classified under multiple CVEs, but specific CVE numbers were not provided in the articles. The current status indicates that users are advised to check for updates immediately. 3 sources 61

Extracted Entities

Zimbra Collaboration Suite Information Disclosure Vulnerability

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (1)

Vulnerabilities (1)