CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-04-21
Zimbra Collaboration Suite (ZCS) Memcached Command Injection Vulnerability (CVE-2022-27924) Security Advisory
[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0.
[Impact] Unauthenticated remote attackers can inject arbitrary Memcached commands, leading to cache poisoning, session hijacking, and credential theft.
[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or higher).