CVE-2019-9621

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
81.0%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.

Vendor
Synacor
Product
Zimbra Collaboration Suite (ZCS)
Added to KEV
Jul 7, 2025
Remediation due
Jul 28, 2025 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-918, CWE-807
EPSS
81.0% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded