Back to the CVE list
CVE-2022-37042 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Vulnerability in N/a

CVSS score

9.8

EPSS probability

%91.9

Risk score

18.0

Published

4 y ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

Rapid724.09.2026

When Business Email Compromise Starts Rewriting Reality

Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets.This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the traditional BEC model in unexpected ways. We uncovered over 50 vulnerabilities, and found that several a

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-37042"