CVE-2019-9670
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVSS
—
Sin CVSS
EPSS
100.0%
p100
KEV
SÍ
10 ene 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
100.0%EPSS · 30 días100.0%
2026-09-162026-10-14
Producto
Synacor / Zimbra Collaboration Suite (ZCS)
Vulnerabilidad
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Añadido a KEV
10 ene 2022
Remediar antes de
10 jul 2022
Uso conocido en ransomware
No
Descripción resumida
Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2019-9670
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-735708.9 ALT99.4%
KEV—80Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability52dCVE-2025-663767.2 ALT97.4%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability8dCVE-2022-413529.8 CRÍ99.9%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability35dCVE-2022-370429.8 CRÍ99.8%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability72dCVE-2022-279257.2 ALT99.9%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability13dCVE-2022-279247.5 ALT99.8%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability13d