CVE

CVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Synacor · Zimbra Collaboration Suite (ZCS)

Date added (CISA)

2022-01-10

Remediation due

2022-07-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.