CVE-2019-9670

KEV

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

View CVE record →

Vendor / Project: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Date added: Jan 10, 2022
Due date: Jul 10, 2022
Known ransomware use: Unknown
CWEs: CWE-611

Description

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-9670