Vulnerabilitycritical

Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities

The Hacker Newsby @TheHackersNewsFeb 10, 2025 · 09:09 UTC (Feb 10, 2025)1 min read1

Read at thehackernews.com

Analyze CVE-2025-25064 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-25064 CVE-2025-25065

Tags: cve-2025-25064 cve-2025-25065 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-25064 +1 related CVE CVE-2025-25065	Authenticated SQL Injection in Zimbra Collaboration ZimbraSync Service	8.8 group max	37%		Feb 3, 2025

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Feb 10, 2025 Vulnerability / Data Protection Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in information disclosure under certain conditions. The vulnerability, tracked as CVE-2025-25064 , carries a CVSS score of 9. 8 out of a maximum of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.