CVE-2025-27915

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-27915

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27915.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-27915

Published

2025-03-12T00:00:00Z

Modified

2026-08-12T15:13:45.439415Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event inside a <details> tag. This allows an attacker to run arbitrary JavaScript within the victim's session, potentially leading to unauthorized actions such as setting e-mail filters to redirect messages to an attacker-controlled address. As a result, an attacker can perform unauthorized actions on the victim's account, including e-mail redirection and data exfiltration.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27915.json"
}

References

Affected packages

Git

github.com/zimbra/zm-build

Affected ranges

Type

GIT

Repo

https://github.com/zimbra/zm-build

Events

Introduced

b68c7b31a1d94f94903a79c53f1bd316b792de1d

Fixed

c0b92ff9ecea256518a3d205c7fe1e36ec776e2d

Introduced

52b539ef205db233bfd8116e8130e27735b4153c

Fixed

c099c685055ce0dda8f78a7ecb764482f407f0df

Introduced

b6cd8f69d2761c014d4a3807f0bdee0011386444

Last affected

bcb978ccc354d99d843725886083e321759b6765

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.13"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.5"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p1"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "9.0.0-p19"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "9.0.0-p20"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p28"
        },
        {
            "last_affected": "9.0.0-p28"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p36"
        },
        {
            "last_affected": "9.0.0-p36"
        },
        {
            "introduced": "9.0.0-p37"
        },
        {
            "last_affected": "9.0.0-p37"
        },
        {
            "introduced": "9.0.0-p38"
        },
        {
            "last_affected": "9.0.0-p38"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "9.0.0-p7"
        },
        {
            "last_affected": "9.0.0-p7"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p36:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p37:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*"
    ]
}

Affected versions

10.*

10.0.0-GA

10.0.1

10.0.4

10.0.5

10.0.6

10.0.9

10.1.0

10.1.1

10.1.4

9.*

9.0.0

9.0.0-NA

9.0.0-p1

9.0.0-p20

9.0.0-p23

9.0.0-p25

9.0.0-p26

9.0.0-p27

9.0.0-p28

9.0.0-p33

9.0.0-p36

9.0.0-p37

9.0.0-p38

9.0.0-p4

9.0.0-p7

9.0.0.p4

9.0.0.p7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27915.json"

github.com/zimbra/zm-mailbox

Affected ranges

Type

GIT

Repo

https://github.com/zimbra/zm-mailbox

Events

Introduced

8033bd1ec9d7211c2eb5fa71aeb3b4073a8dc160

Fixed

f71bb9e0fc4367158daab23460145facb880685b

Introduced

de2f187263204c5edbcd64ab4aad155367f27eef

Fixed

f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7

Introduced

2ec276e0cd140c34d2e8aa6e2260a10901e43a9d

Last affected

10b7ff251aee6f4770ad75377a1f81491ad5bdb9

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.13"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.5"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p1"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "9.0.0-p10"
        },
        {
            "last_affected": "9.0.0-p10"
        },
        {
            "introduced": "9.0.0-p11"
        },
        {
            "last_affected": "9.0.0-p11"
        },
        {
            "introduced": "9.0.0-p13"
        },
        {
            "last_affected": "9.0.0-p13"
        },
        {
            "introduced": "9.0.0-p14"
        },
        {
            "last_affected": "9.0.0-p14"
        },
        {
            "introduced": "9.0.0-p16"
        },
        {
            "last_affected": "9.0.0-p16"
        },
        {
            "introduced": "9.0.0-p17"
        },
        {
            "last_affected": "9.0.0-p17"
        },
        {
            "introduced": "9.0.0-p18"
        },
        {
            "last_affected": "9.0.0-p18"
        },
        {
            "introduced": "9.0.0-p19"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "9.0.0-p2"
        },
        {
            "last_affected": "9.0.0-p2"
        },
        {
            "introduced": "9.0.0-p20"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "9.0.0-p22"
        },
        {
            "last_affected": "9.0.0-p22"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p24"
        },
        {
            "last_affected": "9.0.0-p24"
        },
        {
            "introduced": "9.0.0-p24\\.1"
        },
        {
            "last_affected": "9.0.0-p24\\.1"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p28"
        },
        {
            "last_affected": "9.0.0-p28"
        },
        {
            "introduced": "9.0.0-p29"
        },
        {
            "last_affected": "9.0.0-p29"
        },
        {
            "introduced": "9.0.0-p3"
        },
        {
            "last_affected": "9.0.0-p3"
        },
        {
            "introduced": "9.0.0-p30"
        },
        {
            "last_affected": "9.0.0-p30"
        },
        {
            "introduced": "9.0.0-p32"
        },
        {
            "last_affected": "9.0.0-p32"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p34"
        },
        {
            "last_affected": "9.0.0-p34"
        },
        {
            "introduced": "9.0.0-p38"
        },
        {
            "last_affected": "9.0.0-p38"
        },
        {
            "introduced": "9.0.0-p39"
        },
        {
            "last_affected": "9.0.0-p39"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "9.0.0-p40"
        },
        {
            "last_affected": "9.0.0-p40"
        },
        {
            "introduced": "9.0.0-p41"
        },
        {
            "last_affected": "9.0.0-p41"
        },
        {
            "introduced": "9.0.0-p43"
        },
        {
            "last_affected": "9.0.0-p43"
        },
        {
            "introduced": "9.0.0-p5"
        },
        {
            "last_affected": "9.0.0-p5"
        },
        {
            "introduced": "9.0.0-p6"
        },
        {
            "last_affected": "9.0.0-p6"
        },
        {
            "introduced": "9.0.0-p7"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "introduced": "9.0.0-p8"
        },
        {
            "last_affected": "9.0.0-p8"
        },
        {
            "introduced": "9.0.0-p9"
        },
        {
            "last_affected": "9.0.0-p9"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p28:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p29:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p30:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p32:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p34:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p38:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p39:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p40:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p41:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p43:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*"
    ]
}

Affected versions

10.*

10.0.0-GA

10.0.1

10.0.11

10.0.12

10.0.2

10.0.5

10.0.6

10.0.7

10.0.8

10.0.9

10.1.0

10.1.1

10.1.2

10.1.3

10.1.4

9.*

9.0.0

9.0.0-NA

9.0.0-p1

9.0.0-p10

9.0.0-p11

9.0.0-p13

9.0.0-p16

9.0.0-p17

9.0.0-p18

9.0.0-p19

9.0.0-p2

9.0.0-p20

9.0.0-p22

9.0.0-p23

9.0.0-p24

9.0.0-p24\.1

9.0.0-p25

9.0.0-p26

9.0.0-p27

9.0.0-p28

9.0.0-p29

9.0.0-p3

9.0.0-p30

9.0.0-p32

9.0.0-p33

9.0.0-p34

9.0.0-p38

9.0.0-p39

9.0.0-p4

9.0.0-p40

9.0.0-p41

9.0.0-p43

9.0.0-p5

9.0.0-p6

9.0.0-p7

9.0.0-p8

9.0.0-p9

9.0.0.p1

9.0.0.p2

9.0.0.p3

9.0.0.p4

9.0.0.p5

9.0.0.p6

9.0.0.p7

9.0.0.p8

9.0.0.p9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27915.json"

vanir_signatures

[
    {
        "target": {
            "function": "isRegistered",
            "file": "store/src/java/com/zimbra/cs/account/ZimbraAuthToken.java"
        },
        "deprecated": false,
        "source": "https://github.com/zimbra/zm-mailbox/commit/f71bb9e0fc4367158daab23460145facb880685b",
        "id": "CVE-2025-27915-204903a0",
        "signature_version": "v1",
        "digest": {
            "length": 440.0,
            "function_hash": "147912439549378573183391761697496305370"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "register",
            "file": "store/src/java/com/zimbra/cs/account/ZimbraAuthToken.java"
        },
        "deprecated": false,
        "source": "https://github.com/zimbra/zm-mailbox/commit/f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7",
        "id": "CVE-2025-27915-401a15b8",
        "signature_version": "v1",
        "digest": {
            "length": 537.0,
            "function_hash": "207573606511665395831561257673851577337"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "register",
            "file": "store/src/java/com/zimbra/cs/account/ZimbraAuthToken.java"
        },
        "deprecated": false,
        "source": "https://github.com/zimbra/zm-mailbox/commit/f71bb9e0fc4367158daab23460145facb880685b",
        "id": "CVE-2025-27915-5b50a674",
        "signature_version": "v1",
        "digest": {
            "length": 553.0,
            "function_hash": "335162369327712599477812998866283790401"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "store/src/java/com/zimbra/cs/account/ZimbraAuthToken.java"
        },
        "deprecated": false,
        "source": "https://github.com/zimbra/zm-mailbox/commit/f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7",
        "id": "CVE-2025-27915-b56c7cb1",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "209130410428302556674071306187255704306",
                "225310395921744025336948292490858461814",
                "202190201291662939402323303269050111616",
                "132751591392474821768102870026283226265",
                "172346609573432209325122272615371308482",
                "222857540467584160731142151123556065446",
                "114702154303227773654858857858893039850",
                "115463294749429024956935728040097366866",
                "254866902658856906789416304683651989454",
                "52368022671279424149706331470829537460",
                "3082333680933600016665998035313867610",
                "228023414434089579059873133297067383621",
                "221657657252478192217487153310191495491",
                "167520746795132071856396247014516156578"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "store/src/java/com/zimbra/cs/account/ZimbraAuthToken.java"
        },
        "deprecated": false,
        "source": "https://github.com/zimbra/zm-mailbox/commit/f71bb9e0fc4367158daab23460145facb880685b",
        "id": "CVE-2025-27915-bf6cb457",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "209130410428302556674071306187255704306",
                "225310395921744025336948292490858461814",
                "202190201291662939402323303269050111616",
                "132751591392474821768102870026283226265",
                "172346609573432209325122272615371308482",
                "222857540467584160731142151123556065446",
                "114702154303227773654858857858893039850",
                "115463294749429024956935728040097366866",
                "254866902658856906789416304683651989454",
                "52368022671279424149706331470829537460",
                "3082333680933600016665998035313867610",
                "228023414434089579059873133297067383621",
                "221657657252478192217487153310191495491",
                "167520746795132071856396247014516156578"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "isRegistered",
            "file": "store/src/java/com/zimbra/cs/account/ZimbraAuthToken.java"
        },
        "deprecated": false,
        "source": "https://github.com/zimbra/zm-mailbox/commit/f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7",
        "id": "CVE-2025-27915-fd099f8b",
        "signature_version": "v1",
        "digest": {
            "length": 424.0,
            "function_hash": "312730700685781896464381642890126485675"
        },
        "signature_type": "Function"
    }
]

vanir_signatures_modified

"2026-08-12T15:13:45Z"

github.com/zimbra/zm-zcs

Affected ranges

Type

GIT

Repo

https://github.com/zimbra/zm-zcs

Events

Introduced

7cf503e14f689f39bad171475fb4e151bfcc22ee

Last affected

7de0c769b7fc9297a78320491ecaa362b046a3d1

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        }
    ],
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*"
    ]
}

Affected versions

9.*

9.0.0

9.0.0-NA

9.0.0-p25

9.0.0-p26

9.0.0.p25

9.0.0.p26

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27915.json"

github.com/zimbra/zm-zcs-lib

Affected ranges

Type

GIT

Repo

https://github.com/zimbra/zm-zcs-lib

Events

Introduced

08274721e99c2522952c640cd42e4d0cf676d432

Last affected

af8f3fdbf25569a2c98a1ed80478bccb8c50d9b6

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p13"
        },
        {
            "last_affected": "9.0.0-p13"
        },
        {
            "introduced": "9.0.0-p14"
        },
        {
            "last_affected": "9.0.0-p14"
        },
        {
            "introduced": "9.0.0-p16"
        },
        {
            "last_affected": "9.0.0-p16"
        },
        {
            "introduced": "9.0.0-p17"
        },
        {
            "last_affected": "9.0.0-p17"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p24"
        },
        {
            "last_affected": "9.0.0-p24"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p3"
        },
        {
            "last_affected": "9.0.0-p3"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "9.0.0-p43"
        },
        {
            "last_affected": "9.0.0-p43"
        }
    ],
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p43:*:*:*:*:*:*"
    ]
}

Affected versions

9.*

9.0.0

9.0.0-NA

9.0.0-p13

9.0.0-p14

9.0.0-p16

9.0.0-p17

9.0.0-p23

9.0.0-p24

9.0.0-p25

9.0.0-p27

9.0.0-p3

9.0.0-p4

9.0.0-p43

9.0.0.p13

9.0.0.p14

9.0.0.p16

9.0.0.p17

9.0.0.p23

9.0.0.p24

9.0.0.p25

9.0.0.p27

9.0.0.p33

9.0.0.p4

9.0.0.p43

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27915.json"