7.2HIGHCISA KEV — actively exploited

CVE-2022-27925 — Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and…

Synacor · Zimbra Collaboration Suite · Published 21 Apr 2022 · Modified 1 Oct 2026

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

References

http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html
https://wiki.zimbra.com/wiki/Security_Center
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html
https://wiki.zimbra.com/wiki/Security_Center
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27925

What to do

Check whether Zimbra Collaboration Suite is in your asset inventory.
Exploitation confirmed — patch within 72 hours.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2022-27925