Skip to main content

Zimbra Collaboration Suite Information Disclosure Vulnerability

Release Date: 21 Apr 2026 12806 Views

RISK: High Risk

TYPE: Servers - Internet App Servers

TYPE: Internet App Servers

A vulnerability has been identified in Zimbra Collaboration Suite. A remote attacker could exploit this vulnerability to trigger cross-site scripting and sensitive information disclosure the targeted system.

 

Note:


Impact

  • Cross-Site Scripting
  • Information Disclosure

System / Technologies affected

  • Prior to Version 9.0.0 Patch 43
  • Prior to Version 10.0.12

  • Prior to Version 10.1.4

  • Prior to Version 8.8.15 Patch 47


Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

  • Version 9.0.0 Patch 43
  • Version 10.0.12
  • Version 10.1.4
  • Version 8.8.15 Patch 47

Vulnerability Identifier


Source


Related Link