Vulnerabilities CVE-2022-27924

CVE-2022-27924

Medium

Open

KEV

TLP:CLEAR

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

Details

EPSS Score ⓘ: 85.40%

99.7th percentile
Confidence: 100%
Published: Apr 20, 2022
Last Modified: Aug 4, 2026
CISA KEV
Date Added: Aug 4, 2022
Patch Due: Aug 25, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.