CVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

CISA KEV FIRST EPSS Trusted public threat intelligence

Critical KEV Listed

Vendor

Synacor

Product

Zimbra Collaboration Suite (ZCS)

EPSS Score

1.0000

EPSS Percentile

1.000

Why this is prioritized

• This CVE is listed in the Known Exploited Vulnerabilities catalog.

• EPSS score: 1.0000

• EPSS percentile: 1.000

• Known ransomware campaign use: Unknown

• Added to KEV: 10 Jan 2022

• CISA remediation due date: 10 Jul 2022

Summary

This vulnerability is prioritized by TractionGRC using trusted public sources. KEV status reflects whether active exploitation has been observed, while EPSS reflects the estimated probability of exploitation in the next 30 days.

Back to threats Sign in to subscribe