CVE
CVE-2022-27925
- First Reported
- Jul 10, 2026
- Latest Reported
- Sep 24, 2026
CVE Enrichment
- CVSS
- 7.2 HIGH
- EPSS
- 98.68%
- EPSS Percentile
- 99.92%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- cve@mitre.org
- Published
- 21-Apr-2022 07:15
- Last Modified
- 02-Oct-2026 02:17
- EPSS Date
- 2026-10-11
- CWE
- CWE-22
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:H /
UI:N /
S:U /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2022-08-11
- Remediation Due
- 2022-09-01
- Known Ransomware Campaign Use
- Known
- Required Action
- Apply updates per vendor instructions.
- Notes
- https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/; https://nvd.nist.gov/vuln/detail/CVE-2022-27925
Affected Products / Versions
- synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p10:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p12:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p13:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p14:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p15:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p16:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p17:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p18:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p19:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p2:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p21:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p22:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p25:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p27:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p28:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p29:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p4:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p7:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p8:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 8.8.15
cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p9:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p12:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p15:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p21:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:* - synacor / zimbra_collaboration_suite
Version / affected range: 9.0.0
cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (3)
- Go back further and the pattern holds. Rapid7 tracked widespread exploitation of CVE-2022-27925 and CVE-2022-37042 in 2022, a path traversal chained with an authentication bypass that let attackers drop a JSP shell on a Zimbra Vulnerabilities Could Let Attackers Manipulate Email, Documents and Calendars
- CVE-2022-27925 Recorded Future Identifies 73 High-Impact Vulnerabilities in August, 70 Actively Exploited
- CVE-2022-27925 Recorded Future Reported 59 High-Impact Vulnerabilities in June, 56 Actively Exploited
CVE (128)
Malware (10)
Threat Actors (7)
Vendors (41)
Products (75)
Tools (8)
Industries (3)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.