CVE-2019-9670
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
10 de jan. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
100.0%EPSS · 30 dias100.0%
2026-10-082026-11-05
Produto
Synacor / Zimbra Collaboration Suite (ZCS)
Vulnerabilidade
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Adicionado ao KEV
10 de jan. de 2022
Corrigir até
10 de jul. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2019-9670
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-735708.9 ALT99.4%
KEV—80Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability74dCVE-2025-663767.2 ALT97.5%
KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability30dCVE-2022-413529.8 CRÍ99.9%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability57dCVE-2022-370429.8 CRÍ99.8%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability94dCVE-2022-279257.2 ALT99.9%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability35dCVE-2022-279247.5 ALT99.8%
KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability35d