CVE-2023-37580

LLM-synthesized narrative grounded in this CVE's description and references.

• VMware/Zimbra Collaboration Suite14 versions

  cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*+ 13 more

  • cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*range: >=8.8.0,<8.8.15
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p37:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p38:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*
  • cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*
• Zimbra/Zimbra Collaboration (ZCS)cpe-rescue2 versions

  (expand)+ 1 more

  • (no CPE)
  • (no CPE)range: <8.8.15 Patch 41
• Zimbra/ZCSllm-fuzzy

  Range: <8.8.15 Patch 41
• Zimbra/Zimbra Web Clientllm-fuzzy

  Range: <8.8.15 Patch 41

• www.openwall.com/lists/oss-security/2023/11/17/2nvdMailing ListPatch
• wiki.zimbra.com/wiki/Security_CenternvdRelease Notes
• wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_PolicynvdNot Applicable
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
  The Hacker News · Jul 11, 2026