CVE-2025-25065

synacor zimbra collaboration suite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-25065

Katalog CVE

CVSS 5.3 · Medium EPSS 0,59%

Kerentanan Server-Side Request Forgery (SSRF) pada synacor zimbra collaboration suite. Skor CVSS 3.1 5.3 (Medium) menurut CISA ADP.

Deskripsi (NVD)

SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.1.x before 10.1.4 allows unauthorized redirection to internal network endpoints.

Rincian

Terbit di NVD
3 Februari 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.3 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-918: Server-Side Request Forgery (SSRF)
EPSS (30 hari)
0,59% peluang dieksploitasi; lebih tinggi dari 46,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
synacor zimbra collaboration suite Semua versi sebelum 9.0.0
synacor zimbra collaboration suite Versi 10.0.0 hingga sebelum 10.0.12
synacor zimbra collaboration suite Versi 10.1.0 hingga sebelum 10.1.4
synacor zimbra collaboration suite Versi 9.0.0
synacor zimbra collaboration suite Versi 9.0.0 p1
synacor zimbra collaboration suite Versi 9.0.0 p10
synacor zimbra collaboration suite Versi 9.0.0 p11
synacor zimbra collaboration suite Versi 9.0.0 p12
synacor zimbra collaboration suite Versi 9.0.0 p13
synacor zimbra collaboration suite Versi 9.0.0 p14
synacor zimbra collaboration suite Versi 9.0.0 p15
synacor zimbra collaboration suite Versi 9.0.0 p16
synacor zimbra collaboration suite Versi 9.0.0 p17
synacor zimbra collaboration suite Versi 9.0.0 p18
synacor zimbra collaboration suite Versi 9.0.0 p19
synacor zimbra collaboration suite Versi 9.0.0 p2
synacor zimbra collaboration suite Versi 9.0.0 p20
synacor zimbra collaboration suite Versi 9.0.0 p21
synacor zimbra collaboration suite Versi 9.0.0 p22
synacor zimbra collaboration suite Versi 9.0.0 p23
synacor zimbra collaboration suite Versi 9.0.0 p24
synacor zimbra collaboration suite Versi 9.0.0 p24.1
synacor zimbra collaboration suite Versi 9.0.0 p25
synacor zimbra collaboration suite Versi 9.0.0 p26
synacor zimbra collaboration suite Versi 9.0.0 p27
synacor zimbra collaboration suite Versi 9.0.0 p28
synacor zimbra collaboration suite Versi 9.0.0 p29
synacor zimbra collaboration suite Versi 9.0.0 p3
synacor zimbra collaboration suite Versi 9.0.0 p30
synacor zimbra collaboration suite Versi 9.0.0 p31
synacor zimbra collaboration suite Versi 9.0.0 p32
synacor zimbra collaboration suite Versi 9.0.0 p33
synacor zimbra collaboration suite Versi 9.0.0 p34
synacor zimbra collaboration suite Versi 9.0.0 p35
synacor zimbra collaboration suite Versi 9.0.0 p36
synacor zimbra collaboration suite Versi 9.0.0 p37
synacor zimbra collaboration suite Versi 9.0.0 p38
synacor zimbra collaboration suite Versi 9.0.0 p39
synacor zimbra collaboration suite Versi 9.0.0 p4
synacor zimbra collaboration suite Versi 9.0.0 p40
synacor zimbra collaboration suite Versi 9.0.0 p41
synacor zimbra collaboration suite Versi 9.0.0 p42
synacor zimbra collaboration suite Versi 9.0.0 p5
synacor zimbra collaboration suite Versi 9.0.0 p6
synacor zimbra collaboration suite Versi 9.0.0 p7
synacor zimbra collaboration suite Versi 9.0.0 p8
synacor zimbra collaboration suite Versi 9.0.0 p9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.