Cyber threats / Vulnerabilities

CVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
100.0%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

Vendor
Synacor
Product
Zimbra Collaboration Suite (ZCS)
Added to KEV
Jan 10, 2022
Remediation due
Jul 10, 2022 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-611
EPSS
100.0% as of Nov 10
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References