Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-41352

🗓️ 26 Sep 2022 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 934 Views🌐 WEB

Zimbra Collaboration (ZCS) 8.8.15 and 9.0 allows arbitrary file upload via amavis, leading to incorrect access to user accounts

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today		Zimbra Collaboration Suite TAR Path Traversal Exploit
21 Oct 202200:00
–zdt
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
17 Mar 202419:59
–githubexploit
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
11 Nov 202220:58
–githubexploit
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
10 Oct 202213:04
–githubexploit
ICS		North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
25 Jul 202412:00
–ics
ATTACKERKB		CVE-2022-40684
18 Oct 202200:00
–attackerkb
ATTACKERKB		CVE-2023-2868
24 May 202319:15
–attackerkb
ATTACKERKB		CVE-2022-41352
26 Sep 202200:00
–attackerkb
ATTACKERKB		CVE-2024-45519
2 Oct 202400:00
–attackerkb
Circl		CVE-2022-41352
26 Sep 202207:22
–circl
Rows per page
NVD
Node
synacorzimbra_collaboration_suiteMatch9.0.0-
OR
synacorzimbra_collaboration_suiteMatch9.0.0p1
OR
synacorzimbra_collaboration_suiteMatch9.0.0p10
OR
synacorzimbra_collaboration_suiteMatch9.0.0p11
OR
synacorzimbra_collaboration_suiteMatch9.0.0p12
OR
synacorzimbra_collaboration_suiteMatch9.0.0p13
OR
synacorzimbra_collaboration_suiteMatch9.0.0p14
OR
synacorzimbra_collaboration_suiteMatch9.0.0p15
OR
synacorzimbra_collaboration_suiteMatch9.0.0p16
OR
synacorzimbra_collaboration_suiteMatch9.0.0p17
OR
synacorzimbra_collaboration_suiteMatch9.0.0p18
OR
synacorzimbra_collaboration_suiteMatch9.0.0p19
OR
synacorzimbra_collaboration_suiteMatch9.0.0p2
OR
synacorzimbra_collaboration_suiteMatch9.0.0p20
OR
synacorzimbra_collaboration_suiteMatch9.0.0p21
OR
synacorzimbra_collaboration_suiteMatch9.0.0p22
OR
synacorzimbra_collaboration_suiteMatch9.0.0p23
OR
synacorzimbra_collaboration_suiteMatch9.0.0p24
OR
synacorzimbra_collaboration_suiteMatch9.0.0p24.1
OR
synacorzimbra_collaboration_suiteMatch9.0.0p25
OR
synacorzimbra_collaboration_suiteMatch9.0.0p26
OR
synacorzimbra_collaboration_suiteMatch9.0.0p3
OR
synacorzimbra_collaboration_suiteMatch9.0.0p4
OR
synacorzimbra_collaboration_suiteMatch9.0.0p5
OR
synacorzimbra_collaboration_suiteMatch9.0.0p6
OR
synacorzimbra_collaboration_suiteMatch9.0.0p7
OR
synacorzimbra_collaboration_suiteMatch9.0.0p8
OR
synacorzimbra_collaboration_suiteMatch9.0.0p9
Node
synacorzimbra_collaboration_suiteMatch8.8.15-
OR
synacorzimbra_collaboration_suiteMatch8.8.15p1
OR
synacorzimbra_collaboration_suiteMatch8.8.15p10
OR
synacorzimbra_collaboration_suiteMatch8.8.15p11
OR
synacorzimbra_collaboration_suiteMatch8.8.15p12
OR
synacorzimbra_collaboration_suiteMatch8.8.15p13
OR
synacorzimbra_collaboration_suiteMatch8.8.15p14
OR
synacorzimbra_collaboration_suiteMatch8.8.15p15
OR
synacorzimbra_collaboration_suiteMatch8.8.15p16
OR
synacorzimbra_collaboration_suiteMatch8.8.15p17
OR
synacorzimbra_collaboration_suiteMatch8.8.15p18
OR
synacorzimbra_collaboration_suiteMatch8.8.15p19
OR
synacorzimbra_collaboration_suiteMatch8.8.15p2
OR
synacorzimbra_collaboration_suiteMatch8.8.15p20
OR
synacorzimbra_collaboration_suiteMatch8.8.15p21
OR
synacorzimbra_collaboration_suiteMatch8.8.15p22
OR
synacorzimbra_collaboration_suiteMatch8.8.15p23
OR
synacorzimbra_collaboration_suiteMatch8.8.15p24
OR
synacorzimbra_collaboration_suiteMatch8.8.15p25
OR
synacorzimbra_collaboration_suiteMatch8.8.15p26
OR
synacorzimbra_collaboration_suiteMatch8.8.15p27
OR
synacorzimbra_collaboration_suiteMatch8.8.15p28
OR
synacorzimbra_collaboration_suiteMatch8.8.15p29
OR
synacorzimbra_collaboration_suiteMatch8.8.15p3
OR
synacorzimbra_collaboration_suiteMatch8.8.15p30
OR
synacorzimbra_collaboration_suiteMatch8.8.15p31
OR
synacorzimbra_collaboration_suiteMatch8.8.15p31.1
OR
synacorzimbra_collaboration_suiteMatch8.8.15p32
OR
synacorzimbra_collaboration_suiteMatch8.8.15p33
OR
synacorzimbra_collaboration_suiteMatch8.8.15p4
OR
synacorzimbra_collaboration_suiteMatch8.8.15p5
OR
synacorzimbra_collaboration_suiteMatch8.8.15p6
OR
synacorzimbra_collaboration_suiteMatch8.8.15p7
OR
synacorzimbra_collaboration_suiteMatch8.8.15p8
OR
synacorzimbra_collaboration_suiteMatch8.8.15p9
ParameterPositionPathDescriptionCWE
TARGET_PATHpath/zimbra/public/<random>.jspArbitrary JSP file written via tar/cpio path traversal during Zimbra CVE-2022-41352 exploit (writing to public web directory).CWE-22
TARGET_FILENAMEpath/zimbra/public/<random>.jspArbitrary JSP file written via tar/cpio path traversal during Zimbra CVE-2022-41352 exploit (writing to public web directory).CWE-22
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Nov 2025 16:27Current
9.4High risk
Vulners AI Score9.4
CVSS 3.19.8
EPSS0.93958
SSVC
CWE-22In Wild
zimbrazcsarbitrary file uploadamaviscpioaccess controlvulnerability
934