CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-08-12
Zimbra Collaboration Suite (ZCS) Authentication Bypass and Directory Traversal Remote Code Execution (RCE) Vulnerability (CVE-2022-37042)
[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0
[Impact] Unauthenticated attackers can bypass authentication, upload malicious ZIP archives, and exploit directory traversal to write arbitrary files, leading to Remote Code Execution (RCE)
[Mitigation] Immediately apply the official Zimbra security patches and restrict external access to the mboximport endpoint