CVE

CVE-2019-9621

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)

Date added (CISA)

2025-07-07

Remediation due

2025-07-28

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.