Abstract
This article talks about the most dangerous Zimbra mail server vulnerabilities of 2021-2022. In addition, the terms of their use, vulnerable code parts and features are indicated. The risk of vulnerabilities is higher than 7.0 according to the Common Vulnerability Scoring System (CVSS) rating. This shows how easy it is to exploit the vulnerability and how much damage it can do to the system. Using them, attackers can perform various commands on the server itself, starting with accessing mail. If we take into account that Zimbra mail belongs to popular corporate solutions, we can see that its users are business representatives and the public sector. And the value of information in them is important not only for those individuals, but also for the state. After analyzing each vulnerability, their patches for each branch are shown.