Lucene search
China National Vulnerability DatabaseCNVD-2022-71402HistoryApr 22, 2022 - 12:00 a.m.
Zimbra File Upload Vulnerability
2022-04-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
34
0.948 High
EPSS
Percentile
99.3%
Zimbra Collaboration (aka ZCS) versions 8.8.15 and 9.0 are vulnerable to a file upload vulnerability that stems from a lack of valid authentication of uploaded files by the application. An authenticated attacker with administrator privileges could exploit the vulnerability to be able to upload arbitrary files to the system, which could lead to remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zimbra zimbra collaboration | eq | 8.8.15 | |
| zimbra zimbra collaboration | eq | 9.0 |
Related
cvelist
cvelist
CVE-2022-27925
2022-04-20 23:23:25
CVE-2022-37042
2022-08-11 19:37:27
prion
prion
Directory traversal
2022-04-21 00:15:00
Directory traversal
2022-08-12 15:15:00
githubexploit
githubexploit
Exploit for Path Traversal in Zimbra Collaboration
2022-08-26 20:19:48
Exploit for Path Traversal in Zimbra Collaboration
2022-08-20 15:58:29
Exploit for Path Traversal in Zimbra Collaboration
2022-08-14 22:22:55
metasploit
metasploit
Zip Path Traversal in Zimbra (mboximport) (CVE-2022-27925)
2022-08-23 16:43:51
osv
osv
CVE-2022-27925
2022-04-21 00:15:08
CVE-2022-37042
2022-08-12 15:15:16
nvd
nvd
CVE-2022-27925
2022-04-21 00:15:08
CVE-2022-37042
2022-08-12 15:15:16
hivepro
hivepro
cve
cve
CVE-2022-27925
2022-04-21 00:15:08
CVE-2022-37042
2022-08-12 15:15:16
cisa_kev
cisa_kev
Zimbra Collaboration (ZCS) Authentication Bypass Vulnerability
2022-08-11 00:00:00
Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability
2022-08-11 00:00:00
attackerkb
attackerkb
checkpoint_advisories
checkpoint_advisories
Zimbra Collaboration Directory Traversal (CVE-2022-27925; CVE-2022-37042)
2022-08-16 00:00:00
nuclei
nuclei
Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution
2022-08-17 03:20:32
malwarebytes
malwarebytes
[updated] Thousands of Zimbra mail servers backdoored in large scale attack
2022-08-11 13:00:00
packetstorm
packetstorm
Zimbra Zip Path Traversal
2022-08-24 00:00:00
zdt
zdt
Zimbra Zip Path Traversal Exploit
2022-08-25 00:00:00
thn
thn
rapid7blog
rapid7blog
Metasploit Wrap-Up
2022-08-26 21:47:13
What’s New in InsightVM and Nexpose: Q3 2022 in Review
2022-09-28 14:11:35
nessus
nessus
ics
ics
Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
2023-01-27 12:00:00