← back
CVE-2025-62763

CVE-2025-62763

CVSS 5 MEDIUMEPSS 0.2%CWE-918
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Oct 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Zimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat proxy.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Affected products
Zimbra · Collaboration

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://blog.zimbra.com/2025/10/patch-release-update-zimbra-10-1-12/https://wiki.zimbra.com/wiki/Security_Centerhttps://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12#Security_Fixeshttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisories