CVE-2025-25065

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-25065
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25065.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-25065
Published
2025-02-03T00:00:00Z
Modified
2026-07-22T03:36:22.329400Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.1.x before 10.1.4 allows unauthorized redirection to internal network endpoints.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25065.json",
    "cna_assigner": "mitre",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "9.0.0"
                },
                {
                    "introduced": "10.0.x"
                },
                {
                    "fixed": "10.0.12"
                },
                {
                    "introduced": "10.1.x"
                },
                {
                    "fixed": "10.1.4"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git
github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b6cd8f69d2761c014d4a3807f0bdee0011386444
Introduced
52b539ef205db233bfd8116e8130e27735b4153c
Fixed
16fcfbde0910368571419d9becd0401a95af6e7f
Introduced
b6cd8f69d2761c014d4a3807f0bdee0011386444
Last affected
bcb978ccc354d99d843725886083e321759b6765
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "9.0.0"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.4"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p1"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "9.0.0-p19"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "9.0.0-p20"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p28"
        },
        {
            "last_affected": "9.0.0-p28"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p36"
        },
        {
            "last_affected": "9.0.0-p36"
        },
        {
            "introduced": "9.0.0-p37"
        },
        {
            "last_affected": "9.0.0-p37"
        },
        {
            "introduced": "9.0.0-p38"
        },
        {
            "last_affected": "9.0.0-p38"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "9.0.0-p7"
        },
        {
            "last_affected": "9.0.0-p7"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p36:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p37:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*"
    ]
}

Affected versions

10.*
10.1.0
10.1.1
8.*
8.7.10
8.7.11
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.10
8.8.12
8.8.2
8.8.3
8.8.4
8.8.6
8.8.7
8.8.8
8.8.9
8.8.9.p1
8.8.9.p3
9.*
9.0.0
9.0.0-NA
9.0.0-p1
9.0.0-p20
9.0.0-p23
9.0.0-p25
9.0.0-p26
9.0.0-p27
9.0.0-p28
9.0.0-p33
9.0.0-p36
9.0.0-p37
9.0.0-p38
9.0.0-p4
9.0.0-p7
9.0.0.p4
9.0.0.p7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25065.json"
github.com/zimbra/zm-mailbox

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-mailbox
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
2ec276e0cd140c34d2e8aa6e2260a10901e43a9d
Introduced
8033bd1ec9d7211c2eb5fa71aeb3b4073a8dc160
Fixed
36b0176b086d3ced0cd751ec0aca4d9869574496
Introduced
de2f187263204c5edbcd64ab4aad155367f27eef
Fixed
02deeb6294c2327768a7177124ea3bab2a56e56c
Introduced
2ec276e0cd140c34d2e8aa6e2260a10901e43a9d
Last affected
10b7ff251aee6f4770ad75377a1f81491ad5bdb9
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "9.0.0"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.12"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.4"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p1"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "9.0.0-p10"
        },
        {
            "last_affected": "9.0.0-p10"
        },
        {
            "introduced": "9.0.0-p11"
        },
        {
            "last_affected": "9.0.0-p11"
        },
        {
            "introduced": "9.0.0-p13"
        },
        {
            "last_affected": "9.0.0-p13"
        },
        {
            "introduced": "9.0.0-p14"
        },
        {
            "last_affected": "9.0.0-p14"
        },
        {
            "introduced": "9.0.0-p16"
        },
        {
            "last_affected": "9.0.0-p16"
        },
        {
            "introduced": "9.0.0-p17"
        },
        {
            "last_affected": "9.0.0-p17"
        },
        {
            "introduced": "9.0.0-p18"
        },
        {
            "last_affected": "9.0.0-p18"
        },
        {
            "introduced": "9.0.0-p19"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "9.0.0-p2"
        },
        {
            "last_affected": "9.0.0-p2"
        },
        {
            "introduced": "9.0.0-p20"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "9.0.0-p22"
        },
        {
            "last_affected": "9.0.0-p22"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p24"
        },
        {
            "last_affected": "9.0.0-p24"
        },
        {
            "introduced": "9.0.0-p24\\.1"
        },
        {
            "last_affected": "9.0.0-p24\\.1"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p28"
        },
        {
            "last_affected": "9.0.0-p28"
        },
        {
            "introduced": "9.0.0-p29"
        },
        {
            "last_affected": "9.0.0-p29"
        },
        {
            "introduced": "9.0.0-p3"
        },
        {
            "last_affected": "9.0.0-p3"
        },
        {
            "introduced": "9.0.0-p30"
        },
        {
            "last_affected": "9.0.0-p30"
        },
        {
            "introduced": "9.0.0-p32"
        },
        {
            "last_affected": "9.0.0-p32"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p34"
        },
        {
            "last_affected": "9.0.0-p34"
        },
        {
            "introduced": "9.0.0-p38"
        },
        {
            "last_affected": "9.0.0-p38"
        },
        {
            "introduced": "9.0.0-p39"
        },
        {
            "last_affected": "9.0.0-p39"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "9.0.0-p40"
        },
        {
            "last_affected": "9.0.0-p40"
        },
        {
            "introduced": "9.0.0-p41"
        },
        {
            "last_affected": "9.0.0-p41"
        },
        {
            "introduced": "9.0.0-p5"
        },
        {
            "last_affected": "9.0.0-p5"
        },
        {
            "introduced": "9.0.0-p6"
        },
        {
            "last_affected": "9.0.0-p6"
        },
        {
            "introduced": "9.0.0-p7"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "introduced": "9.0.0-p8"
        },
        {
            "last_affected": "9.0.0-p8"
        },
        {
            "introduced": "9.0.0-p9"
        },
        {
            "last_affected": "9.0.0-p9"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p29:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p30:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p32:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p34:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p39:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p40:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p41:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*"
    ]
}

Affected versions

10.*
10.0.0-GA
10.0.1
10.0.11
10.0.2
10.0.5
10.0.6
10.0.7
10.0.8
10.0.9
10.1.0
10.1.1
10.1.2
10.1.3
8.*
8.8.10
8.8.12
8.8.2
8.8.3
8.8.4
8.8.5
8.8.6
8.8.7
8.8.8
8.8.9
9.*
9.0.0
9.0.0-NA
9.0.0-p1
9.0.0-p10
9.0.0-p11
9.0.0-p13
9.0.0-p16
9.0.0-p17
9.0.0-p18
9.0.0-p19
9.0.0-p2
9.0.0-p20
9.0.0-p22
9.0.0-p23
9.0.0-p24
9.0.0-p24\.1
9.0.0-p25
9.0.0-p26
9.0.0-p27
9.0.0-p28
9.0.0-p29
9.0.0-p3
9.0.0-p30
9.0.0-p32
9.0.0-p33
9.0.0-p34
9.0.0-p38
9.0.0-p39
9.0.0-p4
9.0.0-p40
9.0.0-p41
9.0.0-p5
9.0.0-p6
9.0.0-p7
9.0.0-p8
9.0.0-p9
9.0.0.p1
9.0.0.p2
9.0.0.p3
9.0.0.p4
9.0.0.p5
9.0.0.p6
9.0.0.p7
9.0.0.p8
9.0.0.p9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25065.json"
vanir_signatures_modified 
"2026-07-22T03:36:22Z"
vanir_signatures 
[
    {
        "digest": {
            "function_hash": "250239021129922179859369307689305685860",
            "length": 2910.0
        },
        "id": "CVE-2025-25065-2802cfab",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/zimbra/zm-mailbox/commit/36b0176b086d3ced0cd751ec0aca4d9869574496",
        "signature_type": "Function",
        "target": {
            "function": "handle",
            "file": "store/src/java/com/zimbra/cs/service/account/ChangePassword.java"
        }
    },
    {
        "digest": {
            "function_hash": "250239021129922179859369307689305685860",
            "length": 2910.0
        },
        "id": "CVE-2025-25065-80107f44",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/zimbra/zm-mailbox/commit/02deeb6294c2327768a7177124ea3bab2a56e56c",
        "signature_type": "Function",
        "target": {
            "function": "handle",
            "file": "store/src/java/com/zimbra/cs/service/account/ChangePassword.java"
        }
    },
    {
        "digest": {
            "line_hashes": [
                "100352541356968744543459554936932541435",
                "34980778564753151690669805825885263298",
                "163615395104885010895005793672519100036",
                "324766885195200298088869019113793247780"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-25065-8d17d1e8",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/zimbra/zm-mailbox/commit/36b0176b086d3ced0cd751ec0aca4d9869574496",
        "signature_type": "Line",
        "target": {
            "file": "store/src/java/com/zimbra/cs/service/account/ChangePassword.java"
        }
    },
    {
        "digest": {
            "line_hashes": [
                "100352541356968744543459554936932541435",
                "34980778564753151690669805825885263298",
                "163615395104885010895005793672519100036",
                "324766885195200298088869019113793247780"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-25065-f5d96fd7",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/zimbra/zm-mailbox/commit/02deeb6294c2327768a7177124ea3bab2a56e56c",
        "signature_type": "Line",
        "target": {
            "file": "store/src/java/com/zimbra/cs/service/account/ChangePassword.java"
        }
    }
]
github.com/zimbra/zm-zcs

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7cf503e14f689f39bad171475fb4e151bfcc22ee
Introduced
7cf503e14f689f39bad171475fb4e151bfcc22ee
Last affected
7de0c769b7fc9297a78320491ecaa362b046a3d1
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "9.0.0"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*"
    ]
}

Affected versions

8.*
8.7.10
8.7.11
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.0beta2
8.8.10
8.8.11
8.8.12
8.8.15
8.8.2
8.8.3
8.8.4
8.8.5
8.8.6
8.8.7
8.8.8
8.8.9
9.*
9.0.0
9.0.0-NA
9.0.0-p25
9.0.0-p26
9.0.0.p25
9.0.0.p26

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25065.json"
github.com/zimbra/zm-zcs-lib

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs-lib
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
08274721e99c2522952c640cd42e4d0cf676d432
Introduced
e94be3228495cb215d7bb70d6ae24bc8a42cc01f
Fixed
c1556310402cd7363f11c8b974c23ed59389b884
Introduced
0da199c818c28750b27aec8c2aa1fa8420086d4e
Fixed
544f6ac469b9b633b2d42a8d66b8db8b24043708
Introduced
08274721e99c2522952c640cd42e4d0cf676d432
Last affected
f7d07af90e612dba63830d5f7babb18d7c512eb4
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "9.0.0"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.12"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.4"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p13"
        },
        {
            "last_affected": "9.0.0-p13"
        },
        {
            "introduced": "9.0.0-p14"
        },
        {
            "last_affected": "9.0.0-p14"
        },
        {
            "introduced": "9.0.0-p16"
        },
        {
            "last_affected": "9.0.0-p16"
        },
        {
            "introduced": "9.0.0-p17"
        },
        {
            "last_affected": "9.0.0-p17"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p24"
        },
        {
            "last_affected": "9.0.0-p24"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p3"
        },
        {
            "last_affected": "9.0.0-p3"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*"
    ]
}

Affected versions

10.*
10.0.0-GA
10.0.1
10.0.9
10.1.0
10.1.1
8.*
8.7.10
8.7.11
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.10
8.8.11
8.8.12
8.8.2
8.8.3
8.8.4
8.8.5
8.8.6
8.8.7
8.8.8
8.8.9
9.*
9.0.0
9.0.0-NA
9.0.0-p13
9.0.0-p14
9.0.0-p16
9.0.0-p17
9.0.0-p23
9.0.0-p24
9.0.0-p25
9.0.0-p27
9.0.0-p3
9.0.0-p4
9.0.0.p4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25065.json"