Lucene search

[email protected]NVD:CVE-2019-9621

HistoryApr 30, 2019 - 6:29 p.m.

CVE-2019-9621

2019-04-3018:29:08

CWE-918

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.899

Percentile

98.9%

JSON

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.

Affected configurations

Nvd

Node

zimbracollaboration_serverRange<8.6.0

zimbracollaboration_serverRange8.7.0–8.7.11

zimbracollaboration_serverRange8.8.0–8.8.10

zimbracollaboration_serverMatch8.6.0-

zimbracollaboration_serverMatch8.6.0p1

zimbracollaboration_serverMatch8.6.0p10

zimbracollaboration_serverMatch8.6.0p11

zimbracollaboration_serverMatch8.6.0p12

zimbracollaboration_serverMatch8.6.0p2

zimbracollaboration_serverMatch8.6.0p3

zimbracollaboration_serverMatch8.6.0p4

zimbracollaboration_serverMatch8.6.0p5

zimbracollaboration_serverMatch8.6.0p6

zimbracollaboration_serverMatch8.6.0p7

zimbracollaboration_serverMatch8.6.0p8

zimbracollaboration_serverMatch8.6.0p9

zimbracollaboration_serverMatch8.7.11-

zimbracollaboration_serverMatch8.7.11p1

zimbracollaboration_serverMatch8.7.11p2

zimbracollaboration_serverMatch8.7.11p3

zimbracollaboration_serverMatch8.7.11p4

zimbracollaboration_serverMatch8.7.11p5

zimbracollaboration_serverMatch8.7.11p6

zimbracollaboration_serverMatch8.7.11p7

zimbracollaboration_serverMatch8.7.11p8

zimbracollaboration_serverMatch8.7.11p9

zimbracollaboration_serverMatch8.8.10-

zimbracollaboration_serverMatch8.8.10p1

zimbracollaboration_serverMatch8.8.10p2

zimbracollaboration_serverMatch8.8.10p3

zimbracollaboration_serverMatch8.8.10p4

zimbracollaboration_serverMatch8.8.10p5

zimbracollaboration_serverMatch8.8.10p6

zimbracollaboration_serverMatch8.8.11-

zimbracollaboration_serverMatch8.8.11p1

zimbracollaboration_serverMatch8.8.11p2

VendorProductVersionCPE
zimbracollaboration_server*cpe:2.3:a:zimbra:collaboration_server:*:*:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:-:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p1:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p10:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p11:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p12:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p2:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p3:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p4:*:*:*:*:*:*
zimbracollaboration_server8.6.0cpe:2.3:a:zimbra:collaboration_server:8.6.0:p5:*:*:*:*:*:*

Vendor	Product	Version	CPE
zimbra	collaboration_server	*	cpe:2.3:a:zimbra:collaboration_server::::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:-::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p1::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p10::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p11::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p12::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p2::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p3::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p4::::::
zimbra	collaboration_server	8.6.0	cpe:2.3:a:zimbra:collaboration_server:8.6.0:p5::::::