PT-2025-42914 · Zimbra · Zimbra Collaboration Suite

Published 2025-10-16 · Updated 2025-10-21 · CVE-2025-62763

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.12

Description A flaw exists in Zimbra Collaboration Suite (ZCS) due to insufficient input validation. This can allow a remote attacker to perform a Server-Side Request Forgery (SSRF) attack. The vulnerability is related to the configuration of the chat proxy.

Recommendations Update to version 10.1.12 or later.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-00262

CVE-2025-62763

Affected Products

Zimbra Collaboration Suite

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-62763 · Security Note
• https://bdu.fstec.ru/vul/2026-00262 · Security Note
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12#Security_Fixes · Note
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12 · Note
• https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Note
• https://blog.zimbra.com/2025/10/patch-release-update-zimbra-10-1-12 · Note
• https://wiki.zimbra.com/wiki/Security_Center · Note