CVE-2022-27925

CVE-2022-27925 is a critical directory traversal vulnerability affecting Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0, allowing an authenticated administrator to upload arbitrary files. With a CVSS score of 7.2 (HIGH), it presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. This vulnerability is actively exploited, listed in CISA's KEV catalog, and has publicly available Metasploit modules, indicating a high probability of successful exploitation. The high EPSS score, numerous community discussions, and extensive media coverage further underscore its widespread attention and active threat landscape, including its use in known ransomware campaigns.