CVE-2019-9621

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
synacorzimbra_collaboration_suite
𝑥
< 8.6.0
synacorzimbra_collaboration_suite
8.7.0 ≤
𝑥
< 8.7.11
synacorzimbra_collaboration_suite
8.8.0 ≤
𝑥
< 8.8.9
synacorzimbra_collaboration_suite
8.6.0
synacorzimbra_collaboration_suite
8.6.0:patch1
synacorzimbra_collaboration_suite
8.6.0:patch10
synacorzimbra_collaboration_suite
8.6.0:patch11
synacorzimbra_collaboration_suite
8.6.0:patch12
synacorzimbra_collaboration_suite
8.6.0:patch2
synacorzimbra_collaboration_suite
8.6.0:patch3
synacorzimbra_collaboration_suite
8.6.0:patch4
synacorzimbra_collaboration_suite
8.6.0:patch5
synacorzimbra_collaboration_suite
8.6.0:patch6
synacorzimbra_collaboration_suite
8.6.0:patch7
synacorzimbra_collaboration_suite
8.6.0:patch8
synacorzimbra_collaboration_suite
8.6.0:patch9
synacorzimbra_collaboration_suite
8.7.11
synacorzimbra_collaboration_suite
8.7.11:patch1
synacorzimbra_collaboration_suite
8.7.11:patch10
synacorzimbra_collaboration_suite
8.7.11:patch2
synacorzimbra_collaboration_suite
8.7.11:patch3
synacorzimbra_collaboration_suite
8.7.11:patch4
synacorzimbra_collaboration_suite
8.7.11:patch5
synacorzimbra_collaboration_suite
8.7.11:patch6
synacorzimbra_collaboration_suite
8.7.11:patch7
synacorzimbra_collaboration_suite
8.7.11:patch8
synacorzimbra_collaboration_suite
8.7.11:patch9
synacorzimbra_collaboration_suite
8.8.9
synacorzimbra_collaboration_suite
8.8.9:p5
synacorzimbra_collaboration_suite
8.8.9:patch1
synacorzimbra_collaboration_suite
8.8.9:patch2
synacorzimbra_collaboration_suite
8.8.9:patch3
synacorzimbra_collaboration_suite
8.8.9:patch4
synacorzimbra_collaboration_suite
8.8.9:patch6
synacorzimbra_collaboration_suite
8.8.9:patch7
synacorzimbra_collaboration_suite
8.8.9:patch8
synacorzimbra_collaboration_suite
8.8.9:patch9
synacorzimbra_collaboration_suite
8.8.10
synacorzimbra_collaboration_suite
8.8.10:patch1
synacorzimbra_collaboration_suite
8.8.10:patch2
synacorzimbra_collaboration_suite
8.8.10:patch3
synacorzimbra_collaboration_suite
8.8.10:patch4
synacorzimbra_collaboration_suite
8.8.10:patch6
synacorzimbra_collaboration_suite
8.8.10:patch7
synacorzimbra_collaboration_suite
8.8.11
synacorzimbra_collaboration_suite
8.8.11:patch1
synacorzimbra_collaboration_suite
8.8.11:patch2
synacorzimbra_collaboration_suite
8.8.11:patch3
𝑥
= Vulnerable software versions