Zimbra Collaboration Server < 8.7.11 Patch 11, 8.8 < 8.8.9 Patch 10, 8.8.10 < Patch 8, 8.8.11 < Patch 4

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilies: - Zimbra Collaboration Suite allows SSRF via the ProxyServlet component CVE-2019-9621 - Zimbra Collaboration Suite allows Blind SSRF in the Feed component. CVE-2019-6981 Note that...

VulnCheck KEV: CVE-2019-9621

Synacor Zimbra Collaboration Suite ZCS contains a server-side request forgery SSRF vulnerability via the ProxyServlet component...

CVE-2019-9621

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component...

CVE-2019-9621

The CVE-2019-9621 issue affects Zimbra Collaboration Suite (Prox yServlet) and enables SSRF through the ProxyServlet component. Connected docs confirm affected versions (8.6 patch 13; 8.7.x before 8.7.11 patch 10; 8.8.x before 8.8.10 patch 7 or before 8.8.11 patch 3) and show PoCs/exploits levera...

CVE-2019-9621

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component...

Zimbra Collaboration - Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zimbra Collaboration Autodiscover Servlet XXE and ProxyServlet SSRF', 'Description' = %q This module exploits an XML external entity vulnerabilit...

Zimbra Collaboration Autodiscover Servlet XXE / ProxyServlet SSRF

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zimbra Collaboration Autodiscover Servlet XXE and ProxyServlet SSRF', 'Description' = %q This module exploits an XML external entity vulnerabilit...

CVE-2019-9621

creationtimestamp| type| source ---|---|--- 2019-04-10 17:38:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbraxxerce.rb 2019-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46693 2022-03-24 13:53:07+00:00| seen|...