CVE-2019-11318: Synacor Zimbra Collaboration Server

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.

Affected products

• Synacor Zimbra Collaboration Server: up to and including 8.8.12

Published 2020-01-27. Last modified 2026-06-17.