CyberzSOC

Applicability
← Back to CVE-2025-27915

CVE-2025-27915

CVSS 5.4 In CISA KEV Synacor

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

OSV.dev (incl. GHSA)
precedence 80 · revised 2026-09-14
16 affected 8 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2026-02-26
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (14)

Product Status Versions Remediation Source
https://github.com/zimbra/zm-build affected >= b68c7b31a1d94f94903a79c53f1bd316b792de1d, < c0b92ff9ecea256518a3d205c7fe1e36ec776e2d vendor fix → c0b92ff9ecea256518a3d205c7fe1e36ec776e2d osv
https://github.com/zimbra/zm-build affected >= 52b539ef205db233bfd8116e8130e27735b4153c, < c099c685055ce0dda8f78a7ecb764482f407f0df vendor fix → c099c685055ce0dda8f78a7ecb764482f407f0df osv
https://github.com/zimbra/zm-build affected >= b6cd8f69d2761c014d4a3807f0bdee0011386444, <= bcb978ccc354d99d843725886083e321759b6765 none available osv
https://github.com/zimbra/zm-mailbox affected >= 8033bd1ec9d7211c2eb5fa71aeb3b4073a8dc160, < f71bb9e0fc4367158daab23460145facb880685b vendor fix → f71bb9e0fc4367158daab23460145facb880685b osv
https://github.com/zimbra/zm-mailbox affected >= de2f187263204c5edbcd64ab4aad155367f27eef, < f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7 vendor fix → f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7 osv
https://github.com/zimbra/zm-mailbox affected >= 2ec276e0cd140c34d2e8aa6e2260a10901e43a9d, <= 10b7ff251aee6f4770ad75377a1f81491ad5bdb9 none available osv
https://github.com/zimbra/zm-zcs affected >= 7cf503e14f689f39bad171475fb4e151bfcc22ee, <= 7de0c769b7fc9297a78320491ecaa362b046a3d1 none available osv
https://github.com/zimbra/zm-zcs-lib affected >= 59966da74cf9557b1c00e21c3290491e50751a46, <= af8f3fdbf25569a2c98a1ed80478bccb8c50d9b6 none available osv
https://github.com/zimbra/zm-zcs-lib affected >= 08274721e99c2522952c640cd42e4d0cf676d432, <= af8f3fdbf25569a2c98a1ed80478bccb8c50d9b6 none available osv
https://github.com/zimbra/zm-build fixed c0b92ff9ecea256518a3d205c7fe1e36ec776e2d vendor fix → c0b92ff9ecea256518a3d205c7fe1e36ec776e2d osv
https://github.com/zimbra/zm-build fixed c099c685055ce0dda8f78a7ecb764482f407f0df vendor fix → c099c685055ce0dda8f78a7ecb764482f407f0df osv
https://github.com/zimbra/zm-mailbox fixed f71bb9e0fc4367158daab23460145facb880685b vendor fix → f71bb9e0fc4367158daab23460145facb880685b osv
https://github.com/zimbra/zm-mailbox fixed f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7 vendor fix → f43cf83bdf5e5b72dc95d0025b9e9f8f8e569df7 osv
n/a/n/a n/a · n/a affected no version stated vendor label: all versions none available cve_cna

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.