CISA known exploited vulnerability

CVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

SOURCE FACT

Synacor · Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

Apply updates per vendor instructions.

https://nvd.nist.gov/vuln/detail/CVE-2019-9670

CHECK YOUR OUTSIDE-IN INVENTORY