CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-04-30
Zimbra Collaboration Suite ProxyServlet Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-9621) Analysis and Mitigation Guide
[Affected Scope] Zimbra Collaboration Suite before 8.6 Patch 13, 8.7.x before 8.7.11 Patch 10, and 8.8.x before 8.8.10 Patch 7 or 8.8.x before 8.8.11 Patch 3
[Impact] Unauthenticated remote attackers can exploit the ProxyServlet to access internal network resources, or chain it with other vulnerabilities (such as XXE) to steal admin credentials and achieve Remote Code Execution (RCE).
[Mitigation] Immediately apply the official security patches corresponding to your Zimbra version and restrict external access to the ProxyServlet endpoint.