← Back

CVE-2022-27924

nvd nistnuclei
Published: Apr 21, 2022Modified: Oct 31, 2025CISA KEV

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

Affected (56)

Synacor
1 product
Zimbra Collaboration Suite
Configuration A
56 vulnerable
Vulnerable SoftwareAffected Versions
Synacor
Zimbra Collaboration Suite
Version 8.8.15
Zimbra Collaboration Suite
Version 8.8.15 p10
Zimbra Collaboration Suite
Version 8.8.15 p11
Zimbra Collaboration Suite
Version 8.8.15 p12
Zimbra Collaboration Suite
Version 8.8.15 p13
Zimbra Collaboration Suite
Version 8.8.15 p14
Zimbra Collaboration Suite
Version 8.8.15 p15
Zimbra Collaboration Suite
Version 8.8.15 p16
Zimbra Collaboration Suite
Version 8.8.15 p17
Zimbra Collaboration Suite
Version 8.8.15 p18
Zimbra Collaboration Suite
Version 8.8.15 p19
Zimbra Collaboration Suite
Version 8.8.15 p1
Zimbra Collaboration Suite
Version 8.8.15 p20
Zimbra Collaboration Suite
Version 8.8.15 p21
Zimbra Collaboration Suite
Version 8.8.15 p22
Zimbra Collaboration Suite
Version 8.8.15 p23
Zimbra Collaboration Suite
Version 8.8.15 p24
Zimbra Collaboration Suite
Version 8.8.15 p25
Zimbra Collaboration Suite
Version 8.8.15 p26
Zimbra Collaboration Suite
Version 8.8.15 p27
Zimbra Collaboration Suite
Version 8.8.15 p28
Zimbra Collaboration Suite
Version 8.8.15 p29
Zimbra Collaboration Suite
Version 8.8.15 p2
Zimbra Collaboration Suite
Version 8.8.15 p30
Zimbra Collaboration Suite
Version 8.8.15 p31
Zimbra Collaboration Suite
Version 8.8.15 p3
Zimbra Collaboration Suite
Version 8.8.15 p4
Zimbra Collaboration Suite
Version 8.8.15 p5
Zimbra Collaboration Suite
Version 8.8.15 p6
Zimbra Collaboration Suite
Version 8.8.15 p7
Zimbra Collaboration Suite
Version 8.8.15 p8
Zimbra Collaboration Suite
Version 8.8.15 p9
Zimbra Collaboration Suite
Version 9.0.0
Zimbra Collaboration Suite
Version 9.0.0 p10
Zimbra Collaboration Suite
Version 9.0.0 p11
Zimbra Collaboration Suite
Version 9.0.0 p12
Zimbra Collaboration Suite
Version 9.0.0 p13
Zimbra Collaboration Suite
Version 9.0.0 p14
Zimbra Collaboration Suite
Version 9.0.0 p15
Zimbra Collaboration Suite
Version 9.0.0 p16
Zimbra Collaboration Suite
Version 9.0.0 p17
Zimbra Collaboration Suite
Version 9.0.0 p18
Zimbra Collaboration Suite
Version 9.0.0 p19
Zimbra Collaboration Suite
Version 9.0.0 p1
Zimbra Collaboration Suite
Version 9.0.0 p20
Zimbra Collaboration Suite
Version 9.0.0 p21
Zimbra Collaboration Suite
Version 9.0.0 p22
Zimbra Collaboration Suite
Version 9.0.0 p23
Zimbra Collaboration Suite
Version 9.0.0 p2
Zimbra Collaboration Suite
Version 9.0.0 p3
Zimbra Collaboration Suite
Version 9.0.0 p4
Zimbra Collaboration Suite
Version 9.0.0 p5
Zimbra Collaboration Suite
Version 9.0.0 p6
Zimbra Collaboration Suite
Version 9.0.0 p7
Zimbra Collaboration Suite
Version 9.0.0 p8
Zimbra Collaboration Suite
Version 9.0.0 p9

Related CWEs

CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (7)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.