CISA's list that day

11 August 2022

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Synacor Zimbra Collaboration Suite (ZCS). US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2022-27925Arbitrary File UploadSynacor Zimbra Collaboration Suite (ZCS)Patch this weekRansomware use; Metasploit module; EPSS 0.990.99
CVE-2022-37042Authentication BypassSynacor Zimbra Collaboration Suite (ZCS)Patch this weekRansomware use; Metasploit module; EPSS 0.920.92

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.