EDB-46693
functionalZimbra Collaboration - Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2019-04-12catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9670US | critical9.8OT critical | KEV | ||
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscov… | ||||
| CVE-2019-9621US | high7.5OT critical | KEV | ||
Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet compon… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan