CVE-2025-25065

Summary

CVE-2025-25065 is a serious security vulnerability affecting Zimbra Collaboration versions 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.1.x before 10.1.4. This issue involves a SSRF (Server-Side Request Forgery) flaw in the RSS feed parser. An attacker can exploit this vulnerability to redirect traffic to unintended, internal network endpoints, which could potentially lead to unauthorized access or data exposure. This threat highlights the importance of keeping software up-to-date with the latest security patches to protect against known vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.