coldbraid

CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

CVSS
not scored

CWE-611

On CISA’s exploited list

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Added
2022-01-10
Federal patch deadline
2022-07-10
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)