References https://nvd.nist.gov/vuln/detail/CVE-2022-27924 https://www.sentinelone.com/vulnerability-database/cve-2022-27924/ https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories https://www.quorumcyber.com/threat-intelligence/zimbra-collaboration-suite-unauthenticated-rce-exploitation/ https://www.rapid7.com/db/vulnerabilities/zimbra-collaboration-cve-2022-27924/ https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-228a https://thehackernews.com/2022/08/cisa-adds-zimbra-email-vulnerability-to.html https://www.bleepingcomputer.com/news/security/hackers-are-actively-exploiting-password-stealing-flaw-in-zimbra/ https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27924
Related VulnerabilitiesPoCCVE-2022-27924: Zimbra Collaboration Suite - Memcached Command InjectionPoCCVE-2025-68645: Zimbra Collaboration - Local File InclusionZimbra Collaboration 存在本地文件包含漏洞(CVE-2025-68645)PoCZimbra Collaboration Suite /h javax.servlet.include.path_info 文件包含漏洞(CVE-2025-68645)PoCCVE-2025-27915: Zimbra - Cross-Site Scripting via ICS FilesCVE-2019-9670: Zimbra Collaboration XXEPoCCVE-2013-7091: Zimbra Collaboration Server 7.2.2/8.0.2 Local File InclusionPoCCVE-2018-14013: Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site ScriptingPoCCVE-2019-9670: Synacor Zimbra Collaboration <8.7.11p10 - XML External Entity InjectionPoCCVE-2020-7796: Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request ForgeryPoCCVE-2022-27926: Zimbra Collaboration (ZCS) - Cross Site ScriptingPoCCVE-2022-37042: Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution