Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-41352

🗓️ 26 Sep 2022 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 967 Views🌐 WEB

Zimbra Collaboration (ZCS) 8.8.15 and 9.0 allows arbitrary file upload via amavis, leading to incorrect access to user accounts

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today		Zimbra Collaboration Suite TAR Path Traversal Exploit
21 Oct 202200:00
–zdt
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
17 Mar 202419:59
–githubexploit
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
11 Nov 202220:58
–githubexploit
GithubExploit		Exploit for Path Traversal in Zimbra Collaboration
10 Oct 202213:04
–githubexploit
ICS		North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
25 Jul 202412:00
–ics
ATTACKERKB		CVE-2022-40684
18 Oct 202200:00
–attackerkb
ATTACKERKB		CVE-2023-2868
24 May 202319:15
–attackerkb
ATTACKERKB		CVE-2022-41352
26 Sep 202200:00
–attackerkb
ATTACKERKB		CVE-2024-45519
2 Oct 202400:00
–attackerkb
BDU FSTEC		The vulnerability of the cpio archiving utility in the Zimbra Collaboration Suite enterprise email system allows a perpetrator to gain unauthorized access to protected information.
4 Oct 202200:00
–bdu_fstec
Rows per page
NVD
Node
OR
synacorzimbra_collaboration_suiteMatch9.0.0-
synacorzimbra_collaboration_suiteMatch9.0.0p1
synacorzimbra_collaboration_suiteMatch9.0.0p10
synacorzimbra_collaboration_suiteMatch9.0.0p11
synacorzimbra_collaboration_suiteMatch9.0.0p12
synacorzimbra_collaboration_suiteMatch9.0.0p13
synacorzimbra_collaboration_suiteMatch9.0.0p14
synacorzimbra_collaboration_suiteMatch9.0.0p15
synacorzimbra_collaboration_suiteMatch9.0.0p16
synacorzimbra_collaboration_suiteMatch9.0.0p17
synacorzimbra_collaboration_suiteMatch9.0.0p18
synacorzimbra_collaboration_suiteMatch9.0.0p19
synacorzimbra_collaboration_suiteMatch9.0.0p2
synacorzimbra_collaboration_suiteMatch9.0.0p20
synacorzimbra_collaboration_suiteMatch9.0.0p21
synacorzimbra_collaboration_suiteMatch9.0.0p22
synacorzimbra_collaboration_suiteMatch9.0.0p23
synacorzimbra_collaboration_suiteMatch9.0.0p24
synacorzimbra_collaboration_suiteMatch9.0.0p24.1
synacorzimbra_collaboration_suiteMatch9.0.0p25
synacorzimbra_collaboration_suiteMatch9.0.0p26
synacorzimbra_collaboration_suiteMatch9.0.0p3
synacorzimbra_collaboration_suiteMatch9.0.0p4
synacorzimbra_collaboration_suiteMatch9.0.0p5
synacorzimbra_collaboration_suiteMatch9.0.0p6
synacorzimbra_collaboration_suiteMatch9.0.0p7
synacorzimbra_collaboration_suiteMatch9.0.0p8
synacorzimbra_collaboration_suiteMatch9.0.0p9
Node
OR
synacorzimbra_collaboration_suiteMatch8.8.15-
synacorzimbra_collaboration_suiteMatch8.8.15p1
synacorzimbra_collaboration_suiteMatch8.8.15p10
synacorzimbra_collaboration_suiteMatch8.8.15p11
synacorzimbra_collaboration_suiteMatch8.8.15p12
synacorzimbra_collaboration_suiteMatch8.8.15p13
synacorzimbra_collaboration_suiteMatch8.8.15p14
synacorzimbra_collaboration_suiteMatch8.8.15p15
synacorzimbra_collaboration_suiteMatch8.8.15p16
synacorzimbra_collaboration_suiteMatch8.8.15p17
synacorzimbra_collaboration_suiteMatch8.8.15p18
synacorzimbra_collaboration_suiteMatch8.8.15p19
synacorzimbra_collaboration_suiteMatch8.8.15p2
synacorzimbra_collaboration_suiteMatch8.8.15p20
synacorzimbra_collaboration_suiteMatch8.8.15p21
synacorzimbra_collaboration_suiteMatch8.8.15p22
synacorzimbra_collaboration_suiteMatch8.8.15p23
synacorzimbra_collaboration_suiteMatch8.8.15p24
synacorzimbra_collaboration_suiteMatch8.8.15p25
synacorzimbra_collaboration_suiteMatch8.8.15p26
synacorzimbra_collaboration_suiteMatch8.8.15p27
synacorzimbra_collaboration_suiteMatch8.8.15p28
synacorzimbra_collaboration_suiteMatch8.8.15p29
synacorzimbra_collaboration_suiteMatch8.8.15p3
synacorzimbra_collaboration_suiteMatch8.8.15p30
synacorzimbra_collaboration_suiteMatch8.8.15p31
synacorzimbra_collaboration_suiteMatch8.8.15p31.1
synacorzimbra_collaboration_suiteMatch8.8.15p32
synacorzimbra_collaboration_suiteMatch8.8.15p33
synacorzimbra_collaboration_suiteMatch8.8.15p4
synacorzimbra_collaboration_suiteMatch8.8.15p5
synacorzimbra_collaboration_suiteMatch8.8.15p6
synacorzimbra_collaboration_suiteMatch8.8.15p7
synacorzimbra_collaboration_suiteMatch8.8.15p8
synacorzimbra_collaboration_suiteMatch8.8.15p9
ParameterPositionPathDescriptionCWE
TARGET_PATHpath/opt/zimbra/jetty/webapps/zimbra/publicCVE-2022-41352 TAR/CPIO path traversal in Zimbra allowing arbitrary file write to public web directoryCWE-22
TARGET_FILENAMEpath/opt/zimbra/jetty/webapps/zimbra/publicCVE-2022-41352 TAR/CPIO path traversal in Zimbra allowing arbitrary file write to public web directoryCWE-22
FILENAMEpath/opt/zimbra/jetty/webapps/zimbra/publicCVE-2022-41352 TAR/CPIO path traversal in Zimbra allowing arbitrary file write to public web directoryCWE-22
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 05:03Current
9.4High risk
Vulners AI Score9.4
CVSS 3.19.8
EPSS0.95478
SSVC
CWE-22In Wild
zimbrazcsarbitrary file uploadamaviscpioaccess controlvulnerability
967