{"id":"CVE-2019-9670","details":"mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.","modified":"2026-07-08T19:51:54.173740Z","published":"2019-05-29T22:29:01.507Z","references":[{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-9670"},{"type":"ADVISORY","url":"http://www.rapid7.com/db/modules/exploit/linux/http/zimbra_xxe_rce"},{"type":"ADVISORY","url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories"},{"type":"FIX","url":"https://bugzilla.zimbra.com/show_bug.cgi?id=109129"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/152487/Zimbra-Collaboration-Autodiscover-Servlet-XXE-ProxyServlet-SSRF.html"},{"type":"EVIDENCE","url":"https://isc.sans.edu/forums/diary/CVE20199670+Zimbra+Collaboration+Suite+XXE+vulnerability/27570/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/46693/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-build","events":[{"introduced":"0"},{"fixed":"6c3c77b328a0d7d3bafecb79d202960217922ef0"},{"introduced":"6c3c77b328a0d7d3bafecb79d202960217922ef0"},{"last_affected":"e4d1e657f1d2a5a5e8c56c11d7da34ef61574591"}],"database_specific":{"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-p1"},{"last_affected":"8.7.11-p1"},{"introduced":"8.7.11-p2"},{"last_affected":"8.7.11-p2"},{"introduced":"8.7.11-p3"},{"last_affected":"8.7.11-p3"},{"introduced":"8.7.11-p4"},{"last_affected":"8.7.11-p4"},{"introduced":"8.7.11-p5"},{"last_affected":"8.7.11-p5"},{"introduced":"8.7.11-p6"},{"last_affected":"8.7.11-p6"},{"introduced":"8.7.11-p7"},{"last_affected":"8.7.11-p7"},{"introduced":"8.7.11-p8"},{"last_affected":"8.7.11-p8"},{"introduced":"8.7.11-p9"},{"last_affected":"8.7.11-p9"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.7.11-NA","8.7.11-p1","8.7.11-p2","8.7.11-p3","8.7.11-p4","8.7.11-p5","8.7.11-p6","8.7.11-p7","8.7.11-p8","8.7.11-p9","8.7.11.p9","8.7.11.p8","8.7.11.p7","8.7.11.p6","8.7.11.p5","8.7.11.p4","8.7.11.p3","8.7.11.p2","8.7.11.p1","8.7.11","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9670.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-mailbox","events":[{"introduced":"0"},{"fixed":"65929222951131db2cbb2378accbdd5f2fac0980"},{"introduced":"65929222951131db2cbb2378accbdd5f2fac0980"},{"last_affected":"7bcb07bd565ac40849e0dcabb70c6087396fac56"}],"database_specific":{"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-p1"},{"last_affected":"8.7.11-p1"},{"introduced":"8.7.11-p2"},{"last_affected":"8.7.11-p2"},{"introduced":"8.7.11-p3"},{"last_affected":"8.7.11-p3"},{"introduced":"8.7.11-p4"},{"last_affected":"8.7.11-p4"},{"introduced":"8.7.11-p5"},{"last_affected":"8.7.11-p5"},{"introduced":"8.7.11-p6"},{"last_affected":"8.7.11-p6"},{"introduced":"8.7.11-p7"},{"last_affected":"8.7.11-p7"},{"introduced":"8.7.11-p8"},{"last_affected":"8.7.11-p8"},{"introduced":"8.7.11-p9"},{"last_affected":"8.7.11-p9"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.7.11-NA","8.7.11-p1","8.7.11-p2","8.7.11-p3","8.7.11-p4","8.7.11-p5","8.7.11-p6","8.7.11-p7","8.7.11-p8","8.7.11-p9","8.7.6","8.7.11.p9","8.7.11.p8","8.7.11.p7","8.7.11.p6","8.7.11.p5","8.7.11.p4","8.7.11.p3","8.7.11.p2","8.7.11.p1","8.7.11","8.7.10","8.7.9","8.7.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9670.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs","events":[{"introduced":"0"},{"fixed":"e177bad87d5312e7b2cd1915ae8c0cd2528cacdb"},{"introduced":"e177bad87d5312e7b2cd1915ae8c0cd2528cacdb"},{"last_affected":"665cf237e9af42122681f08b9fa7a10d1a35aac3"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-p1"},{"last_affected":"8.7.11-p1"}]}}],"versions":["8.7.11-NA","8.7.11-p1","8.7.11.p1","8.7.11","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9670.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs-lib","events":[{"introduced":"0"},{"fixed":"a1cbf80618e47b3cf0894cbbcaec1da9bece583c"},{"introduced":"a1cbf80618e47b3cf0894cbbcaec1da9bece583c"},{"last_affected":"89d7224f1513c35311733d27e602b6c912d01ed2"}],"database_specific":{"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:p4:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-p3"},{"last_affected":"8.7.11-p3"},{"introduced":"8.7.11-p4"},{"last_affected":"8.7.11-p4"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.7.11-NA","8.7.11-p3","8.7.11.p4","8.7.11.p3","8.7.11","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9670.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}