CVE-2018-10948: Synacor Zimbra Collaboration Suite

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.

Affected products

• Synacor Zimbra Collaboration Suite: up to and including 8.7.1; version 8.8.0 only

Published 2019-05-30. Last modified 2026-06-17.