CVE-2019-9670 CISA KEV · Actively exploited
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVSS score
—
EPSS probability
%100.0
Risk score
—
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
🕵️ CVE-2019-9670 Exploit | XXE in Zimbra Collaboration 8.7.X < 8.7.11p10 (★0)
Makefile Go / Python
GitHub
🕵️ Yet another CVE-2019-9670 exploit, but in Golang. (★0)
Makefile Go / Python
CVE-2019-9670 is used to find XXE bug (★0)
Makefile Go / Python
Zimbra Collaboration - Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)
Makefile Go / Python
Nuclei: Synacor Zimbra Collaboration <8.7.11p10 - XML External Entity Injection
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2022-41352 Actively exploitedPath traversal in N/a
Patch verified Public Exploits:5EPSS %95
9.8
CVE-2022-27924 Actively exploitedVulnerability in N/a
Workaround Public Exploits:1EPSS %94
9.8
CVE-2022-37042 Actively exploitedVulnerability in N/a
Patch verified Public Exploits:4EPSS %92
7.2
CVE-2022-27925 Actively exploitedPath traversal in N/a
Workaround Public Exploits:1EPSS %99
8.9
CVE-2026-73570 Actively exploitedOS command injection in Zimbra Collaboration
Patch status unknown Public Exploits:1EPSS %72
6.1
CVE-2022-24682 Actively exploitedVulnerability in N/a
Workaround Public Exploits:1EPSS %31
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-9670"