{"id":"CVE-2019-9621","details":"Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.","modified":"2026-07-08T05:55:11.813129117Z","published":"2019-04-30T18:29:08.633Z","database_specific":{"unresolved_ranges":[{"vendor_product":"synacor:zimbra_collaboration_suite","cpes":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"8.6.0"},{"fixed":"8.6.0"},{"fixed":"8.6.0"},{"fixed":"8.6.0"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch10:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch11:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch12:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch9:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch10"},{"last_affected":"8.6.0-patch10"},{"introduced":"8.6.0-patch10"},{"last_affected":"8.6.0-patch10"},{"introduced":"8.6.0-patch10"},{"last_affected":"8.6.0-patch10"},{"introduced":"8.6.0-patch10"},{"last_affected":"8.6.0-patch10"},{"introduced":"8.6.0-patch11"},{"last_affected":"8.6.0-patch11"},{"introduced":"8.6.0-patch11"},{"last_affected":"8.6.0-patch11"},{"introduced":"8.6.0-patch11"},{"last_affected":"8.6.0-patch11"},{"introduced":"8.6.0-patch11"},{"last_affected":"8.6.0-patch11"},{"introduced":"8.6.0-patch12"},{"last_affected":"8.6.0-patch12"},{"introduced":"8.6.0-patch12"},{"last_affected":"8.6.0-patch12"},{"introduced":"8.6.0-patch12"},{"last_affected":"8.6.0-patch12"},{"introduced":"8.6.0-patch12"},{"last_affected":"8.6.0-patch12"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.8.9-patch6"},{"last_affected":"8.8.9-patch6"},{"introduced":"8.8.9-patch6"},{"last_affected":"8.8.9-patch6"},{"introduced":"8.8.9-patch6"},{"last_affected":"8.8.9-patch6"},{"introduced":"8.8.9-patch6"},{"last_affected":"8.8.9-patch6"},{"introduced":"8.8.9-patch9"},{"last_affected":"8.8.9-patch9"},{"introduced":"8.8.9-patch9"},{"last_affected":"8.8.9-patch9"},{"introduced":"8.8.9-patch9"},{"last_affected":"8.8.9-patch9"},{"introduced":"8.8.9-patch9"},{"last_affected":"8.8.9-patch9"},{"introduced":"8.8.11-patch1"},{"last_affected":"8.8.11-patch1"},{"introduced":"8.8.11-patch1"},{"last_affected":"8.8.11-patch1"},{"introduced":"8.8.11-patch1"},{"last_affected":"8.8.11-patch1"},{"introduced":"8.8.11-patch1"},{"last_affected":"8.8.11-patch1"}],"source":"CPE_STRING","vendor_product":"synacor:zimbra_collaboration_suite"}]},"references":[{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-9621"},{"type":"ADVISORY","url":"https://blog.tint0.com/2019/03/a-saga-of-code-executions-on-zimbra.html"},{"type":"ADVISORY","url":"https://blog.zimbra.com/2019/03/9826/"},{"type":"ADVISORY","url":"https://wiki.zimbra.com/wiki/Security_Center"},{"type":"ADVISORY","url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories"},{"type":"REPORT","url":"https://bugzilla.zimbra.com/show_bug.cgi?id=109127"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/152487/Zimbra-Collaboration-Autodiscover-Servlet-XXE-ProxyServlet-SSRF.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/153190/Zimbra-XML-Injection-Server-Side-Request-Forgery.html"},{"type":"EVIDENCE","url":"http://www.rapid7.com/db/modules/exploit/linux/http/zimbra_xxe_rce"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/46693/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-build","events":[{"introduced":"0"},{"fixed":"6c3c77b328a0d7d3bafecb79d202960217922ef0"},{"fixed":"5000d7ff7c8650dbfff91678647fabc2bbf0e64b"},{"introduced":"6c3c77b328a0d7d3bafecb79d202960217922ef0"},{"last_affected":"31312ceebfeba104e1e2a16c554e734125b911d1"}],"database_specific":{"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch10:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch9:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch3:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.9"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch1"},{"last_affected":"8.7.11-patch1"},{"introduced":"8.7.11-patch10"},{"last_affected":"8.7.11-patch10"},{"introduced":"8.7.11-patch2"},{"last_affected":"8.7.11-patch2"},{"introduced":"8.7.11-patch3"},{"last_affected":"8.7.11-patch3"},{"introduced":"8.7.11-patch4"},{"last_affected":"8.7.11-patch4"},{"introduced":"8.7.11-patch5"},{"last_affected":"8.7.11-patch5"},{"introduced":"8.7.11-patch6"},{"last_affected":"8.7.11-patch6"},{"introduced":"8.7.11-patch7"},{"last_affected":"8.7.11-patch7"},{"introduced":"8.7.11-patch8"},{"last_affected":"8.7.11-patch8"},{"introduced":"8.7.11-patch9"},{"last_affected":"8.7.11-patch9"},{"introduced":"8.8.9-NA"},{"last_affected":"8.8.9-NA"},{"introduced":"8.8.9-patch1"},{"last_affected":"8.8.9-patch1"},{"introduced":"8.8.9-patch3"},{"last_affected":"8.8.9-patch3"},{"introduced":"8.8.10-NA"},{"last_affected":"8.8.10-NA"},{"introduced":"8.8.11-NA"},{"last_affected":"8.8.11-NA"},{"introduced":"8.8.11-patch3"},{"last_affected":"8.8.11-patch3"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.7.11-NA","8.7.11-patch1","8.7.11-patch10","8.7.11-patch2","8.7.11-patch3","8.7.11-patch4","8.7.11-patch5","8.7.11-patch6","8.7.11-patch7","8.7.11-patch8","8.7.11-patch9","8.8.10-NA","8.8.11-NA","8.8.9-NA","8.8.10","8.8.11.p3","8.8.11","8.8.9.p3","8.8.9.p1","8.8.9","8.8.8","8.7.11","8.8.7","8.8.6","8.8.4","8.8.3","8.8.2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9621.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-mailbox","events":[{"introduced":"0"},{"fixed":"65929222951131db2cbb2378accbdd5f2fac0980"},{"fixed":"d5dcfa4470bbb057d961a28fc9c35717eeaa7225"},{"introduced":"65929222951131db2cbb2378accbdd5f2fac0980"},{"last_affected":"690ec66d0cc226ca25ecde7c39159032e654986b"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch10:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch9:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:p5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:patch7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:patch3:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.9"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch1"},{"last_affected":"8.7.11-patch1"},{"introduced":"8.7.11-patch10"},{"last_affected":"8.7.11-patch10"},{"introduced":"8.7.11-patch2"},{"last_affected":"8.7.11-patch2"},{"introduced":"8.7.11-patch3"},{"last_affected":"8.7.11-patch3"},{"introduced":"8.7.11-patch4"},{"last_affected":"8.7.11-patch4"},{"introduced":"8.7.11-patch5"},{"last_affected":"8.7.11-patch5"},{"introduced":"8.7.11-patch6"},{"last_affected":"8.7.11-patch6"},{"introduced":"8.7.11-patch7"},{"last_affected":"8.7.11-patch7"},{"introduced":"8.7.11-patch8"},{"last_affected":"8.7.11-patch8"},{"introduced":"8.7.11-patch9"},{"last_affected":"8.7.11-patch9"},{"introduced":"8.8.9-NA"},{"last_affected":"8.8.9-NA"},{"introduced":"8.8.9-p5"},{"last_affected":"8.8.9-p5"},{"introduced":"8.8.9-patch1"},{"last_affected":"8.8.9-patch1"},{"introduced":"8.8.9-patch2"},{"last_affected":"8.8.9-patch2"},{"introduced":"8.8.9-patch3"},{"last_affected":"8.8.9-patch3"},{"introduced":"8.8.9-patch4"},{"last_affected":"8.8.9-patch4"},{"introduced":"8.8.9-patch7"},{"last_affected":"8.8.9-patch7"},{"introduced":"8.8.9-patch8"},{"last_affected":"8.8.9-patch8"},{"introduced":"8.8.10-NA"},{"last_affected":"8.8.10-NA"},{"introduced":"8.8.10-patch1"},{"last_affected":"8.8.10-patch1"},{"introduced":"8.8.10-patch2"},{"last_affected":"8.8.10-patch2"},{"introduced":"8.8.10-patch3"},{"last_affected":"8.8.10-patch3"},{"introduced":"8.8.10-patch4"},{"last_affected":"8.8.10-patch4"},{"introduced":"8.8.10-patch6"},{"last_affected":"8.8.10-patch6"},{"introduced":"8.8.10-patch7"},{"last_affected":"8.8.10-patch7"},{"introduced":"8.8.11-NA"},{"last_affected":"8.8.11-NA"},{"introduced":"8.8.11-patch2"},{"last_affected":"8.8.11-patch2"},{"introduced":"8.8.11-patch3"},{"last_affected":"8.8.11-patch3"}]}}],"versions":["8.7.11-NA","8.7.11-patch1","8.7.11-patch10","8.7.11-patch2","8.7.11-patch3","8.7.11-patch4","8.7.11-patch5","8.7.11-patch6","8.7.11-patch7","8.7.11-patch8","8.7.11-patch9","8.8.10-NA","8.8.10-patch1","8.8.10-patch2","8.8.10-patch3","8.8.10-patch4","8.8.10-patch6","8.8.10-patch7","8.8.11-NA","8.8.11-patch2","8.8.11-patch3","8.8.9-NA","8.8.9-p5","8.8.9-patch1","8.8.9-patch2","8.8.9-patch3","8.8.9-patch4","8.8.9-patch7","8.8.9-patch8","8.8.8","8.7.6","8.8.11.p3","8.8.11.p2","8.8.11","8.8.7","8.8.6","8.8.5","8.8.4","8.8.3","8.8.2","8.7.10","8.7.9","8.7.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9621.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs","events":[{"introduced":"0"},{"fixed":"e177bad87d5312e7b2cd1915ae8c0cd2528cacdb"},{"fixed":"d36a4c8999c6377b7ae36c22f47bbea75974e8cc"},{"introduced":"e177bad87d5312e7b2cd1915ae8c0cd2528cacdb"},{"last_affected":"9aefd1afbab7e83046c6dceac5351fc52a026648"}],"database_specific":{"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.9"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch1"},{"last_affected":"8.7.11-patch1"},{"introduced":"8.8.9-NA"},{"last_affected":"8.8.9-NA"},{"introduced":"8.8.10-NA"},{"last_affected":"8.8.10-NA"},{"introduced":"8.8.11-NA"},{"last_affected":"8.8.11-NA"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*"]}}],"versions":["8.7.11-NA","8.7.11-patch1","8.8.10-NA","8.8.11-NA","8.8.9-NA","8.8.11","8.8.10","8.8.9","8.8.8","8.7.11","8.8.7","8.8.6","8.8.5","8.8.4","8.8.3","8.8.2","8.8.0beta2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9621.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs-lib","events":[{"introduced":"0"},{"fixed":"a1cbf80618e47b3cf0894cbbcaec1da9bece583c"},{"fixed":"6e5ea502a8b78a16e1c2d1d51331b62c31eb4c7e"},{"introduced":"a1cbf80618e47b3cf0894cbbcaec1da9bece583c"},{"last_affected":"f44a0aee0f5b049a48b4400c0a0332a2817a3f19"}],"database_specific":{"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.9"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch3"},{"last_affected":"8.7.11-patch3"},{"introduced":"8.7.11-patch4"},{"last_affected":"8.7.11-patch4"},{"introduced":"8.8.9-NA"},{"last_affected":"8.8.9-NA"},{"introduced":"8.8.9-patch3"},{"last_affected":"8.8.9-patch3"},{"introduced":"8.8.10-NA"},{"last_affected":"8.8.10-NA"},{"introduced":"8.8.11-NA"},{"last_affected":"8.8.11-NA"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11:-:*:*:*:*:*:*"]}}],"versions":["8.7.11-NA","8.7.11-patch3","8.8.10-NA","8.8.11-NA","8.8.9-NA","8.8.9-patch3","8.8.11","8.8.10","8.8.9","8.8.8","8.7.11","8.8.7","8.8.6","8.8.5","8.8.4","8.8.3","8.8.2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9621.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}