Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2022-37042

🗓️ 11 Aug 2022 19:37:27Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 1143 Views🌐 WEB

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 allows arbitrary file upload and remote code executio

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
24 Oct 202210:10
–githubexploit
githubexploit
GithubExploit		Exploit for Path Traversal in Synacor Zimbra_Collaboration_Suite
20 Aug 202215:58
–githubexploit
githubexploit
GithubExploit		Exploit for Path Traversal in Synacor Zimbra_Collaboration_Suite
19 Aug 202417:17
–githubexploit
githubexploit
GithubExploit		Exploit for Path Traversal in Synacor Zimbra_Collaboration_Suite
25 Sep 202215:09
–githubexploit
githubexploit
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
25 Aug 202210:43
–githubexploit
zdt
zdt		Zimbra Zip Path Traversal Exploit
25 Aug 202200:00
–zdt
ics
ICS		Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
27 Jan 202312:00
–ics
ics
ICS		NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations
5 Oct 202312:00
–ics
attackerkb
ATTACKERKB		CVE-2022-37042
12 Aug 202200:00
–attackerkb
attackerkb
ATTACKERKB		CVE-2022-27925
21 Apr 202200:00
–attackerkb
Rows per page
NVD
Node
OR
synacorzimbra_collaboration_suiteMatch8.8.15-
synacorzimbra_collaboration_suiteMatch8.8.15p1
synacorzimbra_collaboration_suiteMatch8.8.15p10
synacorzimbra_collaboration_suiteMatch8.8.15p11
synacorzimbra_collaboration_suiteMatch8.8.15p12
synacorzimbra_collaboration_suiteMatch8.8.15p13
synacorzimbra_collaboration_suiteMatch8.8.15p14
synacorzimbra_collaboration_suiteMatch8.8.15p15
synacorzimbra_collaboration_suiteMatch8.8.15p16
synacorzimbra_collaboration_suiteMatch8.8.15p17
synacorzimbra_collaboration_suiteMatch8.8.15p18
synacorzimbra_collaboration_suiteMatch8.8.15p19
synacorzimbra_collaboration_suiteMatch8.8.15p2
synacorzimbra_collaboration_suiteMatch8.8.15p20
synacorzimbra_collaboration_suiteMatch8.8.15p21
synacorzimbra_collaboration_suiteMatch8.8.15p22
synacorzimbra_collaboration_suiteMatch8.8.15p23
synacorzimbra_collaboration_suiteMatch8.8.15p24
synacorzimbra_collaboration_suiteMatch8.8.15p25
synacorzimbra_collaboration_suiteMatch8.8.15p26
synacorzimbra_collaboration_suiteMatch8.8.15p27
synacorzimbra_collaboration_suiteMatch8.8.15p28
synacorzimbra_collaboration_suiteMatch8.8.15p29
synacorzimbra_collaboration_suiteMatch8.8.15p3
synacorzimbra_collaboration_suiteMatch8.8.15p30
synacorzimbra_collaboration_suiteMatch8.8.15p31
synacorzimbra_collaboration_suiteMatch8.8.15p31.1
synacorzimbra_collaboration_suiteMatch8.8.15p32
synacorzimbra_collaboration_suiteMatch8.8.15p4
synacorzimbra_collaboration_suiteMatch8.8.15p5
synacorzimbra_collaboration_suiteMatch8.8.15p6
synacorzimbra_collaboration_suiteMatch8.8.15p7
synacorzimbra_collaboration_suiteMatch8.8.15p8
synacorzimbra_collaboration_suiteMatch8.8.15p9
synacorzimbra_collaboration_suiteMatch9.0.0-
synacorzimbra_collaboration_suiteMatch9.0.0p1
synacorzimbra_collaboration_suiteMatch9.0.0p10
synacorzimbra_collaboration_suiteMatch9.0.0p11
synacorzimbra_collaboration_suiteMatch9.0.0p12
synacorzimbra_collaboration_suiteMatch9.0.0p13
synacorzimbra_collaboration_suiteMatch9.0.0p14
synacorzimbra_collaboration_suiteMatch9.0.0p15
synacorzimbra_collaboration_suiteMatch9.0.0p16
synacorzimbra_collaboration_suiteMatch9.0.0p17
synacorzimbra_collaboration_suiteMatch9.0.0p18
synacorzimbra_collaboration_suiteMatch9.0.0p19
synacorzimbra_collaboration_suiteMatch9.0.0p2
synacorzimbra_collaboration_suiteMatch9.0.0p20
synacorzimbra_collaboration_suiteMatch9.0.0p21
synacorzimbra_collaboration_suiteMatch9.0.0p22
synacorzimbra_collaboration_suiteMatch9.0.0p23
synacorzimbra_collaboration_suiteMatch9.0.0p24
synacorzimbra_collaboration_suiteMatch9.0.0p24.1
synacorzimbra_collaboration_suiteMatch9.0.0p25
synacorzimbra_collaboration_suiteMatch9.0.0p3
synacorzimbra_collaboration_suiteMatch9.0.0p4
synacorzimbra_collaboration_suiteMatch9.0.0p5
synacorzimbra_collaboration_suiteMatch9.0.0p6
synacorzimbra_collaboration_suiteMatch9.0.0p7
synacorzimbra_collaboration_suiteMatch9.0.0p8
synacorzimbra_collaboration_suiteMatch9.0.0p9
ParameterPositionPathDescriptionCWE
cmdquery parampublic/formatter.jspWeb shell via CVE-2022-37042: hidden input in formatter.jsp allows running commands when crafted query parameter is provided.CWE-22
archivepathservice/extension/backup/mboximportZimbra mboximport accepts a ZIP archive to extract files; bypassing authentication can lead to directory traversal and remote code execution.CWE-22

geeyoff

HelpwithCrowdsecbouncerinCaddy,please?

Obi_96

IntegrateCrowdSecwithAbuseIPDB

hakanuzuner

Hep exchange olacak değil ya :) Over 1,000 Zimbra Servers Compromised by Auth Bypass Vulnerability Zimbra Collaboration Suite (ZCS) was found to have an actively exploited authentication bypass vulnerability. The vulnerability is tracked as CVE-2022-37042

Cybersec4u2

Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite. CVE-2022-24682 CVE-2022-27924 CVE-2022-27925 chained with CVE-2022-37042 CVE-2022-30333 #cybersecurity #hacking #security #hacker #technology #infosec #ethicalhacking #cybercrime #linux #hackers #tech

ipssignatures

I know one more IPS that has a protection/signature/rule for the vulnerability CVE-2022-37042. https://t.co/NnOfaX1fGS #Sox7kt2h2ethui

400_yen

Published my #PoC of #Zimbra CVE-2022-27925 CVE-2022-27924 CVE-2022-37042 https://t.co/5nJXUiYZsI

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Aug 2026 05:16Current
9High risk
Vulners AI Score9
CVSS 3.19.8
EPSS0.91893
SSVC
CWE-22In Wild
zimbracollaboration suitezcscve-2022-37042securityremote code executiondirectory traversalauthentication bypass
1143