Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
id: CVE-2019-9621
info:
name: Zimbra Collaboration Suite - SSRF
author: riteshs4hu
severity:
...