What is the CVSS score of CVE-2025-48700?

CVE-2025-48700 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Zimbra Collaboration are affected by CVE-2025-48700?

CVE-2025-48700 presents moderate security risk, a cross-site scripting vulnerability rated CVSS 6.1. Attackers could inject scripts to steal sessions or perform actions as authenticated users.

Is there a public PoC exploit available for CVE-2025-48700?

Yes, a public proof-of-concept exploit is available for CVE-2025-48700. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-48700?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Verify Content-Security-Policy and output encoding.

Zimbra Collaboration CVE-2025-48700

EUVD-2025-18891 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2025-06-23 cve@mitre.org

XSS Authentication Bypass Zimbra Collaboration Suite Synacor

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

vuln.today AI

6.1 MEDIUM

Network attack vector, low complexity, no privileges, user interaction required, scope changed, low CIA.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Added to CISA KEV

Apr 20, 2026 - 19:31 CISA

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18891

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

CVE Published

Jun 23, 2025 - 15:15 nvd

MEDIUM 6.1

DescriptionCVE.org

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction.

AnalysisAI

Cross-site scripting in Zimbra Collaboration (ZCS) Classic UI allows attackers to execute arbitrary JavaScript within a user's session by sending a crafted email. Actively exploited in the wild (CISA KEV) with public exploit code available, affecting versions 8.8.15, 9.0, 10.0, and 10.1.

Technical ContextAI

The vulnerability is a stored cross-site scripting (XSS) issue (CWE-79) in the Zimbra Classic UI, part of Zimbra Collaboration Suite (ZCS). The flaw stems from insufficient sanitization of HTML content in email messages, allowing crafted tag structures and attribute values with @import directives to inject scripts. CPE data confirms affected versions include 8.8.15 and various patch levels, as well as 9.0, 10.0, and 10.1.

RemediationAI

Upgrade to a patched version as per Zimbra Security Advisories (https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories). No specific fix version listed; apply latest patches. Workaround: Disable HTML email rendering in Classic UI or use Zimbra Web Client Modern UI if available. Note: disabling HTML may impact user experience.