VulnRadar

Data against noise.

Page generated: 08 Nov 2026, 11:03 UTC

CVE-2022-37042

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal a…

Read full description

CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.9/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 9.8: +1.47
Fresh EPSS: 92.07%: +0.46

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 12 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Rapid7

Press · 24 Sep 2026, 07:00 · When Business Email Compromise Starts Rewriting Reality - Rapid7

GreyNoise

Press · 02 Feb 2026, 08:00 · The Noise in the Silence: Unmasking CISA's Hidden KEV Ransomware Updates - GreyNoise

Mishcon de Reya LLP

Press · 11 Mar 2025, 07:00 · Leaked ransomware chat logs offer unique insights into attack methodologies - Mishcon de Reya LLP

GreyNoise

Press · 26 Feb 2025, 08:00 · GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs - GreyNoise

Recorded Future

Press · 08 Aug 2023, 07:00 · RedHotel: A Prolific, Chinese State-Sponsored Group Operating at a Global Scale - Recorded Future

See all 12 source documents

Cybersecurity Dive

Press · 11 Nov 2022, 08:00 · CISA warns unpatched Zimbra users to assume breach - Cybersecurity Dive

GreyNoise

Press · 18 Aug 2022, 07:00 · Zimbra Collaboration Suite vulnerability analysis - GreyNoise

TechTarget

Press · 17 Aug 2022, 07:00 · CISA: Threat actors exploiting multiple Zimbra flaws - TechTarget

Rapid7

Press · 17 Aug 2022, 07:00 · Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite - Rapid7

Security Affairs

Press · 12 Aug 2022, 07:00 · Experts warn of mass exploitation of an RCE flaw in Zimbra Collaboration Suite - Security Affairs

SOCRadar

Press · 12 Aug 2022, 07:00 · Over 1,000 Zimbra Servers Compromised by Auth Bypass Vulnerability - SOCRadar

BleepingComputer

Press · 11 Aug 2022, 07:00 · Zimbra auth bypass bug exploited to breach over 1,000 servers - BleepingComputer

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.9 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 9.8; EPSS 92.1%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, no prior privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:41.345711+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Added to the CISA KEV catalog

11 Aug 2022, 00:00

First press mention

11 Aug 2022, 07:00

Published

11 Aug 2022, 19:37

Latest press mention

24 Sep 2026, 07:00

Score calculated

05 Nov 2026, 13:58