blog.zimbra.com
https://blog.zimbra.com/2025/10/patch-release-update-zimbra-10-1-12 CVE-2025-62763
MEDIUM
Record summary
CVE-2025-62763 has a selected CVSS score of 5.0 (medium).
Description
Zimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat proxy.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 21, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
CollaborationBrowse Zimbra / CollaborationDefault status: unaffected | CVE List | Before 10.1.12 | affected |
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-62763 wiki.zimbra.com
https://wiki.zimbra.com/wiki/Security_Center wiki.zimbra.com
https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12 wiki.zimbra.com
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories