CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-9670

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.944

EPSS Ranking 100.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

Proposed Action

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

Ransomware Campaign

Unknown

References

Products affected by CVE-2019-9670

Synacor » Zimbra Collaboration Suite » Version: 8.7.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.0
Synacor » Zimbra Collaboration Suite » Version: 8.7.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.1
Synacor » Zimbra Collaboration Suite » Version: 8.7.10

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.10
Synacor » Zimbra Collaboration Suite » Version: 8.7.11

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11
Synacor » Zimbra Collaboration Suite » Version: 8.7.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.2
Synacor » Zimbra Collaboration Suite » Version: 8.7.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.3
Synacor » Zimbra Collaboration Suite » Version: 8.7.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.4
Synacor » Zimbra Collaboration Suite » Version: 8.7.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.5
Synacor » Zimbra Collaboration Suite » Version: 8.7.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.6
Synacor » Zimbra Collaboration Suite » Version: 8.7.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.7
Synacor » Zimbra Collaboration Suite » Version: 8.7.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.8
Synacor » Zimbra Collaboration Suite » Version: 8.7.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-9670

Products

Pricing

Contact Us