Skip to content
COOEY

EXPOSURES › CVE-2019-9621

CVE-2019-9621

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-07-07 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-9621 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 90/100 exploited-in-wildunpatched

Synacor's Zimbra Collaboration Suite suffered an SSRF vulnerability actively exploited by ransomware

Synacor's Zimbra Collaboration Suite (ZCS) had a Server-Side Request Forgery (SSRF) flaw that was exploited in the wild by ransomware, highlighting the vendor's chronic vulnerability management failure.

Shame score — Chronic vulnerability management failure by Synacor, with critical flaws remaining unpatched and exploited by ransomware.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Synacor · vendorZimbra Collaboration Suite (ZCS) · product
DESCRIPTION

Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.