CVE-2022-27925
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.
CISA Known Exploited Vulnerability
Vendor / Product
Synacor — Zimbra Collaboration Suite (ZCS)
Date Added
2022-08-11
Remediation Due
2022-09-01
Ransomware Use
CONFIRMED
https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/; https://nvd.nist.gov/vuln/detail/CVE-2022-27925
Weakness Classification (1)
Affected Software (55)
Showing 30 of 55 entries
References & Advisories (5)
Vendor Advisory
Vendor Advisory
US Government Resource
Release Notes
Vendor Advisory
Exploit
Third Party Advisory
VDB Entry