CVE-2025-68645 is a high-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Zimbra sites for it with a live exploit check.
Reads internal configuration files like WEB-INF/web.xml without authentication through Zimbra's RestFilter servlet path parameter.
Is your app exploitable through CVE-2025-68645?
Scan your domain free