ctrlINT What the industry said about every indicator, with the quote

CVE-2022-37042Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by GreyNoise · last reported

Last reported 30 days ago

CISA KEVAdded 11 Aug 2022
Fix due 1 Sep 2022
Used by ransomware: knownCISA KEV catalogue
EPSS91.9%
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

  1. “Rapid7 tracked widespread exploitation of CVE-2022-27925 and CVE-2022-37042 in 2022, a path traversal chained with an authentication bypass that let attackers drop a JSP shell on a Zimbra server without credentials.”

    Rapid7Vendor
    When Business Email Compromise Starts Rewriting Reality

  2. “CVE-2022-37042 – Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability”

    GreyNoiseVendor
    GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs

Indicators reported together

named in the same reports

Also named with it: CVE-2022-27925, CVE-2017-11882, CVE-2023-38831, CVE-2023-36884, CVE-2017-5753, CVE-2020-1472, CVE-2026-73570, CVE-2021-26855, CVE-2023-20198, CVE-2024-21762, CVE-2022-41082, CVE-2023-23397, CVE-2024-3400, CVE-2021-44228, CVE-2024-1709, CVE-2024-1708, CVE-2023-4966, CVE-2021-40444, CVE-2021-42278, CVE-2021-42287

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2022-37042 here?
No account needed. We do not store your IP address.