CVE-2019-9621

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-9621
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9621.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-9621
Published
2019-04-30T18:29:08.633Z
Modified
2026-04-10T04:20:54.281837Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.

References

Affected packages

Git / github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6c3c77b328a0d7d3bafecb79d202960217922ef0
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6c3c77b328a0d7d3bafecb79d202960217922ef0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
99ed312c10c45aa80e08be0c0ecbce46a53a4ace
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb330ee01d1d1ddfe395bb31076ee6c480fa4a2e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d077c8d575b8d2ea5ef93331958237b22e42e6f7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2705a9ca4782dcc4bea5f7d3653c2bf93f8582bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0867fcb7263fa9a1130b192d8c8538b05db4eee6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a8e4bee73cd2c8e5804788ef5212d0d180f5846
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7b0d4aa4baaf4d62a4858b390856771d30db3c37
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58f5c7adeac0dc81b2286c1b948c97c134587bb9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f862bb6fb9bf2e77fbcea7ff62e92986c4044c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4d1e657f1d2a5a5e8c56c11d7da34ef61574591
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
14a4dfad173dbbe623229e1a850b7610c76bc280
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31312ceebfeba104e1e2a16c554e734125b911d1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31312ceebfeba104e1e2a16c554e734125b911d1
Database specific 
{
    "versions": [
        {
            "introduced": "8.7.0"
        },
        {
            "fixed": "8.7.11"
        },
        {
            "introduced": "8.8.0"
        },
        {
            "fixed": "8.8.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-patch9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-patch1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-patch3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-patch3"
        }
    ]
}
Type
GIT
Repo
https://github.com/zimbra/zm-mailbox
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1d036af2e1c0522fb857c1a9bb3b9581e1ce520
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3c6ef3616ff8d06555806b60d3a4aa5a3ab6d92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
66b2b24c8346512d4411c40189ec3556029272a7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7fc2e615338f81e7dde44c98812fb8e93b3a4e1a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
74fe8e472dedcf06295adbdf5f9c16aaf32d275b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d0c867cad9a285d262b118dad822ae5b20066e62
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1c811f5970a35a1fe7063e68d662fbbc73afc6d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b51c33194a7b7cfdb46dbb87508454b5c51e352d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5fffd333fb13ce2e013dc0ae0e133fbb3d27dd12
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
daeb0ef59f3366feb79f6a5de122511a13b84beb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
13a2edcc14f8be1dfb549525dafcc31586f09dd9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a8851178b07ae98eae9ddfe23ba59109d51a93d6
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-patch2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-patch4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-patch7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-patch8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-patch1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-patch2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-patch3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-patch4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-patch6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-patch7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-patch2"
        }
    ]
}

Affected versions

8.*
8.7.10
8.7.11
8.7.11.p1
8.7.11.p10
8.7.11.p2
8.7.11.p3
8.7.11.p4
8.7.11.p5
8.7.11.p6
8.7.11.p7
8.7.11.p8
8.7.11.p9
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.10
8.8.10.p11
8.8.10.p2
8.8.10.p3
8.8.10.p4
8.8.10.p6
8.8.10.p7
8.8.10.p8
8.8.11
8.8.11.p2
8.8.11.p3
8.8.2
8.8.3
8.8.4
8.8.5
8.8.6
8.8.7
8.8.8
8.8.9
8.8.9.p1
8.8.9.p2
8.8.9.p3
8.8.9.p4
8.8.9.p5
8.8.9.p7
8.8.9.p8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9621.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "8.6.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.6.0-patch9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.9-patch6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.9-patch9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.11-patch1"
            }
        ]
    }
]