CVE-2019-9670

Published May 29, 2019 CVSS 3.1 · 9.8 Critical EPSS 100.0% KEV · Listed
Description
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-01-10'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 21, 2025, 11:45 PM
Reserved
Mar 11, 2019, 12:00 AM
Status
Analyzed
Published
May 29, 2019, 10:29 PM
Modified
Jun 17, 2026, 2:44 AM