Zimbra

A critical security vulnerability (CVE-2025-27915) has been discovered in Zimbra Classic Web Client, allowing attackers to execute arbitrary JavaScript code through stored cross-site scripting (XSS) attacks. This vulnerability poses significant risks to organizations using affected Zimbra installations, as attackers can steal credentials, hijack sessions, and perform unauthorized actions. Security experts recommend immediate patch deployment to mitigate these risks.

Source: https://cybersecuritynews.com/zimbra-classic-web-client-vulnerability/

TPRM report: https://scoringcyber.rankiteo.com/company/zimbra

"id": "zim903062425",
"linkid": "zimbra",
"type": "Vulnerability",
"date": "6/2025",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Zimbra',
                        'type': 'Software Provider'}],
 'attack_vector': 'Stored Cross-Site Scripting (XSS)',
 'description': 'A critical security vulnerability (CVE-2025-27915) in Zimbra '
                'Classic Web Client enables attackers to execute arbitrary '
                'JavaScript code through stored cross-site scripting (XSS) '
                'attacks.',
 'impact': {'systems_affected': 'Zimbra Classic Web Client'},
 'initial_access_broker': {'entry_point': 'Zimbra Classic Web Client '
                                          'interface'},
 'motivation': ['Credential Theft',
                'Session Hijacking',
                'Unauthorized Actions',
                'Phishing Campaigns',
                'Data Exfiltration'],
 'post_incident_analysis': {'corrective_actions': ['Strengthened input '
                                                   'sanitization mechanisms',
                                                   'Improved output encoding '
                                                   'functions',
                                                   'Enhanced HTML parsing '
                                                   'algorithms'],
                            'root_causes': 'Inadequate input sanitization '
                                           'mechanisms'},
 'recommendations': ['Immediate patch deployment recommended',
                     'Enhanced input sanitization',
                     'Strengthened output encoding functions',
                     'Improved HTML parsing algorithms'],
 'response': {'remediation_measures': ['Input validation routines',
                                       'Enhanced content security policies',
                                       'Strengthened input sanitization '
                                       'mechanisms',
                                       'Improved output encoding functions',
                                       'Enhanced HTML parsing algorithms']},
 'title': 'Stored XSS Vulnerability in Zimbra Classic Web Client',
 'type': 'Vulnerability Exploitation',
 'vulnerability_exploited': 'CVE-2025-27915'}