CVE-2015-2249: Synacor Zimbra Collaboration Server

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Zimbra Collaboration before 8.6.0 patch5 has XSS.

Affected products

• Synacor Zimbra Collaboration Server: up to and including 8.5.1; version 8.6.0 only

Published 2020-01-27. Last modified 2026-06-17.