PT-2025-42914
CVE-2025-62763
·
Published
2025-10-16
·
Updated
2025-10-21
Description by
CVSS 3.1
5.0
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Zimbra Collaboration versions prior to 10.1.12
Description
A flaw exists in Zimbra Collaboration Suite (ZCS) due to insufficient input validation. This can allow a remote attacker to perform a Server-Side Request Forgery (SSRF) attack. The vulnerability is related to the configuration of the chat proxy.
Recommendations
Update to version 10.1.12 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾