Vulnerability identifier: #VU66173

Vulnerability risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:H/RL:O/RC:C]

CVE-ID: CVE-2022-27925

CWE-ID: CWE-22

Exploitation vector: Network

Exploits in database: 13

• December 19, 2023
  • CVE-2022-27925-Revshell (Python Script to exploit Zimbra Auth Bypass + RCE (CVE-2022-27925)) [Github]
• October 2, 2022
  • CVE-2022-27925 (A loader for zimbra 2022 rce (cve-2022-27925)) [Github]
• September 18, 2022
  • CVE-2022-27925-Revshell () [Github]
• September 12, 2022
  • CVE-2022-27925 (CVE-2022-27925 nuclei template) [Github]
• September 7, 2022
  • CVE-2022-27925 (Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925)) [Github]
• August 28, 2022
  • CVE-2022-27925-Revshell (Python Script to exploit Zimbra Auth Bypass + RCE (CVE-2022-27925)) [Github]
• August 23, 2022
  • Zip Path Traversal in Zimbra (mboximport) (CVE-2022-27925) [Metasploit]
• August 21, 2022
  • CVE-2022-27925 (Zimbra CVE-2022-27925 PoC) [Github]
  • CVE-2022-27925 () [Github]
• August 20, 2022
  • CVE-2022-27925 () [Github]
  • Zimbra_CVE-2022-37042-_CVE-2022-27925 () [Github]
• August 16, 2022
  • CVE-2022-27925 () [Github]
• August 13, 2022
  • CVE-2022-27925-PoC (Zimbra RCE simple poc) [Github]

Impact: Information disclosure and data manipulation

Vulnerable software:
Zimbra Collaboration
Web applications / Webmail solutions

Vendor: Synacor Inc.