CVE-2019-9621: Zimbra Collaboration Suite - SSRF

HoneyLabs honeypots recorded 118 probes matching CVE-2019-9621 from 15 distinct source IP addresses in the last 7 days. Severity is rated high.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2025-07-07.

Request paths that identify it

  • /autodiscover

Addresses probing it

Source IPProbesNetworkCountry
46.151.178.14104Sino Worldwide Trading LimitedThe Netherlands
172.172.193.2001Microsoft CorporationUnited States
172.202.106.1851Microsoft CorporationUnited States
20.118.27.2121Microsoft CorporationUnited States
20.14.93.2061Microsoft Corporation · commercial scanner: StretchoidUnited States
20.150.193.891Microsoft Corporation · commercial scanner: StretchoidUnited States
20.163.11.721Microsoft Corporation · commercial scanner: StretchoidUnited States
20.163.12.2421Microsoft Corporation · commercial scanner: StretchoidUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS211443Sino Worldwide Trading Limited1041
AS8075Microsoft Corporation1414

Where it comes from

CountryProbes
The Netherlands104
United States14

Captured requests

  • /autodiscover/autodiscover.json?@zdi/Powershell
  • /autodiscover/autodiscover.xml

HTTP client fingerprints

  • b11cun040_00040013_608dab68
  • b11cun040_00040016_aa48e2c8

CVE report

CVE report

Open a specific CVE from the CVE tracker.