Security Advisory

CVE-2019-9670

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-29 21:04:28
Last updated 2025-10-21 23:45:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.