{"metadata": {"vulnerability": "CVE-2025-25064", "count": 48, "kinds": {"milestone": 7, "sighting": 27, "kev": 0, "other": 14}}, "data": [{"timestamp": "2024-12-17T00:00:00Z", "date_only": true, "value": "2024-12-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1090", "record": "CERTFR-2024-AVI-1090", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1090", "record": "CERTFR-2024-AVI-1090", "field": "initial_release_date"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1090", "record": "CERTFR-2024-AVI-1090", "field": "revisions.0.revision_date"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-25064", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-25064", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1090", "record": "CERTFR-2024-AVI-1090", "field": "revisions.1.revision_date"}, {"timestamp": "2025-02-03T19:23:55.882Z", "date_only": false, "value": "2025-02-03T19:23:55.882480Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113941586596378393", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "221ab77c-bfa8-40da-b3a0-89953174e7af", "url": "https://infosec.exchange/users/cve/statuses/113941586596378393"}, {"timestamp": "2025-02-03T20:15:37Z", "date_only": false, "value": "2025-02-03T20:15:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W8HM-78QP-V45P", "record": "GHSA-W8HM-78QP-V45P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-03T20:15:37.257Z", "date_only": false, "value": "2025-02-03T20:15:37.257", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25064", "record": "FKIE_CVE-2025-25064", "field": "published"}, {"timestamp": "2025-02-03T20:16:51.714Z", "date_only": false, "value": "2025-02-03T20:16:51.714258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceddalcz2e", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "321491a0-fdae-4be0-85b2-8e89b0a51568", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceddalcz2e"}, {"timestamp": "2025-02-03T21:31:50Z", "date_only": false, "value": "2025-02-03T21:31:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W8HM-78QP-V45P", "record": "GHSA-W8HM-78QP-V45P", "field": "published"}, {"timestamp": "2025-02-03T21:59:56Z", "date_only": false, "value": "2025-02-03T21:59:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17100", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "d297019d-aba3-424a-81a1-313f909346ae", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25064 - Zimbra Collaboration SQL Injection weakness\", \n  \"Content\": \"CVE ID : CVE-2025-25064 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : SQL injection vulnerability in the ZimbraSyncService SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17100"}, {"timestamp": "2025-02-03T22:08:31.200Z", "date_only": false, "value": "2025-02-03T22:08:31.200418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckksnvcd2h", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "6428295d-ace1-4698-91b0-5213b03b095a", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckksnvcd2h"}, {"timestamp": "2025-02-04T09:10:55.525Z", "date_only": false, "value": "2025-02-04T09:10:55.525420Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0038", "record": "NCSC-2025-0038", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-04T09:10:55.525Z", "date_only": false, "value": "2025-02-04T09:10:55.525420Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0038", "record": "NCSC-2025-0038", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-04T09:10:55.525Z", "date_only": false, "value": "2025-02-04T09:10:55.525420Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0038", "record": "NCSC-2025-0038", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-04T16:48:44.529Z", "date_only": false, "value": "2025-02-04T16:48:44.529194Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113946638367750447", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "073a9afa-b365-42f7-bac5-5f8f75d5dca8", "url": "https://mastodon.social/users/CyberSignaler/statuses/113946638367750447"}, {"timestamp": "2025-02-04T17:12:53.620Z", "date_only": false, "value": "2025-02-04T17:12:53.620881Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj725662z", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "bd5dff62-6481-48c4-9ccf-aed27cdd59d2", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj725662z"}, {"timestamp": "2025-02-04T18:30:48Z", "date_only": false, "value": "2025-02-04T18:30:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W8HM-78QP-V45P", "record": "GHSA-W8HM-78QP-V45P", "field": "modified"}, {"timestamp": "2025-02-06T20:02:26.403Z", "date_only": false, "value": "2025-02-06T20:02:26.403Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-25064", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-10T03:27:16.767Z", "date_only": false, "value": "2025-02-10T03:27:16.767259Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhs76fqnsc2y", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "580364f7-722d-44fb-afa1-e1313ed2624d", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lhs76fqnsc2y"}, {"timestamp": "2025-02-10T04:08:57.928Z", "date_only": false, "value": "2025-02-10T04:08:57.928445Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhsbix3thc2f", "record": "cve-2025-25064", "field": "creation_timestamp", "uuid": "58988182-3f70-4cb3-aa71-f46e982dbdf3", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhsbix3thc2f"}, {"timestamp": "2025-02-10T08:09:00Z", "date_only": false, "value": "2025-02-10T08:09:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "5e49311f-237e-459c-b343-e3f7487591c3", "url": "https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html"}, {"timestamp": "2025-02-10T10:02:41.914Z", "date_only": false, "value": "2025-02-10T10:02:41.914438Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhsvbl7a422k", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "a3ad8f52-8db5-40c9-82e4-5457b44b7bb4", "url": "https://bsky.app/profile/hackingne.ws/post/3lhsvbl7a422k"}, {"timestamp": "2025-02-10T10:20:12Z", "date_only": false, "value": "2025-02-10T10:20:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/6311", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "e85d171d-7a0b-4026-b1ff-14ed2048ae41", "content": "Zimbra's latest patch addresses three new vulnerabilities:\n\n\u2022 SQL Injection (CVE-2025-25064) exposing email metadata to authenticated attackers.\n\u2022 XSS vulnerability in the Classic Web Client, risking user security.\n\u2022 SSRF flaw (CVE-2025-25065) allowing unauthorized redirection to internal systems.\n\nUpgrade ASAP to avoid potential exploitation and secure your systems.\n\nRead: https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html", "url": "https://t.me/thehackernews/6311"}, {"timestamp": "2025-02-10T12:07:52Z", "date_only": false, "value": "2025-02-10T12:07:52.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-9fvifp5SBhmKJGW_cGyMPBmGgQp-30e1wOClZ4NqXCMWA", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "07d23953-9d79-4720-a7f5-58602f1554fe"}, {"timestamp": "2025-02-10T12:34:49Z", "date_only": false, "value": "2025-02-10T12:34:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ton618cyber/2370", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "78436136-77cb-4d72-a39f-12b0e7641c2b", "content": "Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities\n\nZimbra has patched CVE-2025-25064, a critical SQL injection flaw (CVSS 9.8), and other security bugs. Update now to protect against exploits.\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "url": "https://t.me/ton618cyber/2370"}, {"timestamp": "2025-02-10T12:34:49Z", "date_only": false, "value": "2025-02-10T12:34:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ton618cyber/6573", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "0986c1ec-e3fa-416e-ab0d-2a826adda8e7", "content": "Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities\n\nZimbra has patched CVE-2025-25064, a critical SQL injection flaw (CVSS 9.8), and other security bugs. Update now to protect against exploits.\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "url": "https://t.me/ton618cyber/6573"}, {"timestamp": "2025-02-10T15:04:31.105Z", "date_only": false, "value": "2025-02-10T15:04:31.105248Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113980202700650905", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "afd399a8-94f8-4386-8e49-6a75970c16bf", "url": "https://infosec.exchange/users/screaminggoat/statuses/113980202700650905"}, {"timestamp": "2025-02-10T20:42:41.590Z", "date_only": false, "value": "2025-02-10T20:42:41.590941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhtyzxaqzh2u", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "47cc140a-2b6d-4da6-8508-7120f4e63940", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhtyzxaqzh2u"}, {"timestamp": "2025-02-11T01:17:32.568Z", "date_only": false, "value": "2025-02-11T01:17:32.568637Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuifazwf22h", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "a184b033-fa52-47b1-81c2-60742ae3779d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuifazwf22h"}, {"timestamp": "2025-02-11T01:18:08.441Z", "date_only": false, "value": "2025-02-11T01:18:08.441383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuigf3u622h", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "60a10a62-7dc0-41f5-a3ba-bb213d853d05", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuigf3u622h"}, {"timestamp": "2025-02-11T07:19:35.405Z", "date_only": false, "value": "2025-02-11T07:19:35.405538Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-7857acd2-07bf4dd25bfb5d6f", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "618844ca-7678-435d-9d6e-75ab892f77ed", "url": "https://poliverso.org/objects/0477a01e-7857acd2-07bf4dd25bfb5d6f"}, {"timestamp": "2025-02-11T12:06:15Z", "date_only": false, "value": "2025-02-11T12:06:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/11/zimbra-releases-security-updates-for.html", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "dac9fdc4-d0eb-43db-9075-533fab228d29", "url": "https://threatintel.cc/2025/02/11/zimbra-releases-security-updates-for.html"}, {"timestamp": "2025-02-14T04:55:28.277Z", "date_only": false, "value": "2025-02-14T04:55:28.277127Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25064", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-14T04:55:28.277Z", "date_only": false, "value": "2025-02-14T04:55:28.277127Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25064", "record": "FKIE_CVE-2025-25064", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-15T04:18:59Z", "date_only": false, "value": "2025-02-15T04:18:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/13526", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "741c3b89-84bc-4333-b726-eba4acb1caa1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aZimbra 10 SQL Injection (CVE-2025-25064) Analysis Article\nURL\uff1ahttps://github.com/yelang123/Zimbra10_SQL_Injection\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/13526"}, {"timestamp": "2025-02-15T10:00:05Z", "date_only": false, "value": "2025-02-15T10:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7E49vHU2s25U1RVXxjOvncvpdcj7eVYEF75smm769Cd7IQs", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "81e75cdf-84fe-4734-89a2-4c0b5cf8aede"}, {"timestamp": "2025-03-14T17:48:53Z", "date_only": false, "value": "2025-03-14T17:48:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7608", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "e21804cb-83ee-4f4f-b7c0-607a41049208", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25064\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient sanitization of a user-supplied parameter. Authenticated attackers can exploit this vulnerability by manipulating a specific parameter in the request, allowing them to inject arbitrary SQL queries that could retrieve email metadata.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T17:22:58.099Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories\n2. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.4#Security_Fixes\n3. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.12#Security_Fixes", "url": "https://t.me/DarkWebInformer_CVEAlerts/7608"}, {"timestamp": "2025-03-18T17:52:06.844Z", "date_only": false, "value": "2025-03-18T17:52:06.844892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lkoabw6otc2i", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "962e17bd-27b4-478a-b97a-65cc9fa2a22e", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lkoabw6otc2i"}, {"timestamp": "2025-08-25T18:31:43Z", "date_only": false, "value": "2025-08-25T18:31:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "291cc93d-14ba-4c20-a9bc-57f0ea66e7da"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1090", "record": "CERTFR-2024-AVI-1090", "field": "last_revision_date"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1090", "record": "CERTFR-2024-AVI-1090", "field": "revisions.2.revision_date"}, {"timestamp": "2026-02-26T19:09:26.834Z", "date_only": false, "value": "2026-02-26T19:09:26.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-25064", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:26.834Z", "date_only": false, "value": "2026-02-26T19:09:26.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25064", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:00:13.910Z", "date_only": false, "value": "2026-06-17T09:00:13.910", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25064", "record": "FKIE_CVE-2025-25064", "field": "lastModified"}, {"timestamp": "2026-08-04T14:00:12.962Z", "date_only": false, "value": "2026-08-04T14:00:12.962474Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/253", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "cbf5a6d0-9045-4b00-85cc-5195146619b0", "url": "https://t.me/purp_sec/253"}, {"timestamp": "2026-08-05T00:00:21.443Z", "date_only": false, "value": "2026-08-05T00:00:21.443249Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/253", "record": "CVE-2025-25064", "field": "creation_timestamp", "uuid": "a4e24df4-c0f2-4475-921e-8068936a5b24", "url": "https://t.me/purp_sec/253"}]}