Sploitus

CVE-2019-9670

6 known exploits for CVE-2019-9670

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.

Affected products
Zimbra Collaboration Suite
Synacor Zimbra Collaboration Suite
< 8.7.11
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-611
NVD status
Analyzed
Published
2019-05-29
CVE-2019-9670 at NVD
Authoritative description, scoring and affected products

6 known exploits for CVE-2019-9670

Proof-of-concept code and exploit modules indexed by Sploitus

Zimbra-RCE
2026-09-12 KitPloitKITPLOIT
CVE-2019-9670
2026-09-12 KitPloitKITPLOIT
Zimbra-RCE
2026-09-08 KitPloitKITPLOIT
Zimbra Collaboration - Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)
2019-04-12 MetasploitEXPLOITDBRuby
Zimbra Collaboration Autodiscover Servlet XXE / ProxyServlet SSRF
2019-04-11 Jacob RoblesPACKETSTORMRuby
Zimbra Collaboration Autodiscover Servlet XXE / ProxyServlet SSRF Exploit
2019-04-11 metasploitZDTRuby