{"cvss":7.2,"datePublished":"2022-08-11T00:00:00Z","dateUpdated":"2022-08-11T00:00:00Z","description":"Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.","dueDate":"2022-09-01T00:00:00Z","id":"CVE-2022-27925","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Zimbra Collaboration Suite (ZCS)","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"vulncheck_kev","title":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","vendor":"Synacor"}