CVE-2018-14425: Synacor Zimbra Collaboration Suite

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1.

Affected products

• Synacor Zimbra Collaboration Suite: before 8.8.8 (fixed in 8.8.8); version 8.8.8 only; version 8.8.9 only

Published 2019-05-30. Last modified 2026-06-17.