Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Zimbra

Products: Collaboration · Zimbra Collaboration Suite

31.2

Score

2

CVEs

1

Active

1

PoC

1

KEV

#95

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-71275	2026-03-24	9.3v4.0	POC	—	Low	None	YES	0.0	Zimbra Collaboration Suite	Zimbra Collaboration Suite (ZCS) PostJournal service version 8.8.15 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by exploiting improper sanitization of the RCPT TO parameter via SMTP injection. Attackers can inject shell expans
CVE-2025-66376	2026-01-05	7.2v3.1	ACTIVE		Low	None	no	31.2	Collaboration	Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3