UpHeron
All vulnerabilities

Servers and applications

CVE-2022-45912

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote code execution.

Severity
High 7.2
Published
5 Dec 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Zimbra CollaborationServers and applications · cpe:a:zimbra:collaboration
  • Version 8.8.15
  • Version 9.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-45912
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-45912