What is the CVSS score of CVE-2025-25064?

CVE-2025-25064 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 48.3%.

Which versions of Zimbra Collaboration Suite are affected by CVE-2025-25064?

Organizations using the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x face significant risk from CVE-2025-25064, a SQL injection vulnerability rated CVSS 8.8.

How to fix or mitigate CVE-2025-25064?

Within 7 days: Identify all affected systems running the ZimbraSync Service SOAP endpoint in Zimbra Collaboration and apply vendor patches promptly. Validate that input sanitization is in place for all user-controlled parameters.

Zimbra Collaboration Suite CVE-2025-25064

HIGH

SQL Injection (CWE-89)

2025-02-03 cve@mitre.org

SQLi Zimbra Collaboration Suite Synacor

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:07 vuln.today

CVE Published

Feb 03, 2025 - 20:15 nvd

HIGH 8.8

DescriptionCVE.org

SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient sanitization of a user-supplied parameter. Authenticated attackers can exploit this vulnerability by manipulating a specific parameter in the request, allowing them to inject arbitrary SQL queries that could retrieve email metadata.

AnalysisAI

Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 contain a SQL injection in the ZimbraSync Service SOAP endpoint. Authenticated attackers can manipulate a sync parameter to inject arbitrary SQL, extracting email contents, credentials, and mailbox data from the Zimbra database.

Technical ContextAI

The ZimbraSync Service processes mobile device synchronization requests via SOAP. A parameter in the sync protocol is insufficiently sanitized before SQL query construction. An authenticated attacker (any mailbox user) can inject SQL to read arbitrary database content including other users' emails, LDAP credentials, and global configuration.

RemediationAI

Update to Zimbra 10.0.12 or 10.1.4. Review Zimbra audit logs for suspicious sync requests. Rotate LDAP and admin credentials. Check for unauthorized mail forwarding rules.