CVE-2022-41352
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVSS
—
Sin CVSS
EPSS
95.5%
p100
KEV
SÍ
20 oct 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
95.5%EPSS · 30 días95.5%
2026-08-022026-08-30
Producto
Synacor / Zimbra Collaboration Suite (ZCS)
Vulnerabilidad
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Añadido a KEV
20 oct 2022
Remediar antes de
10 nov 2022
Uso conocido en ransomware
No
Descripción resumida
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.
Acción requerida
Apply updates per vendor instructions.
Notas
https://wiki.zimbra.com/wiki/Security_Center; https://nvd.nist.gov/vuln/detail/CVE-2022-41352
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-735708.9 ALT97.3%
KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7dCVE-2022-370429.8 CRÍ99.8%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability27dCVE-2022-279257.2 ALT99.9%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27dCVE-2022-279247.5 ALT99.7%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability27dCVE-2018-68826.1 MED97.8%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability18dCVE-2024-45519—100.0%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability—