CVE-2022-41352
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.
CISA Known Exploited Vulnerability
Vendor / Product
Synacor — Zimbra Collaboration Suite (ZCS)
Date Added
2022-10-20
Remediation Due
2022-11-10
Ransomware Use
CONFIRMED
https://wiki.zimbra.com/wiki/Security_Center; https://nvd.nist.gov/vuln/detail/CVE-2022-41352
Weakness Classification (1)
Affected Software (63)
Showing 30 of 63 entries
References & Advisories (6)
Vendor Advisory
US Government Resource
Third Party Advisory
Patch
Release Notes
Vendor Advisory
Mitigation
Vendor Advisory
Exploit
Third Party Advisory
VDB Entry