CVE-2019-9621: Zimbra Collaboration Suite - SSRF

HoneyLabs honeypots recorded 16 probes matching CVE-2019-9621 from 16 distinct source IP addresses in the last 7 days. Severity is rated high.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /autodiscover

Addresses probing it

Source IPProbesNetworkCountry
74.249.177.2491Microsoft CorporationUnited States
40.124.179.1701Microsoft CorporationUnited States
20.172.67.2411Microsoft CorporationUnited States
48.216.211.2351Microsoft CorporationUnited States
20.121.56.491Microsoft CorporationUnited States
20.171.10.2421Microsoft CorporationUnited States
20.14.72.2101Microsoft CorporationUnited States
20.106.213.51Microsoft CorporationUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation1616

Captured requests

  • /autodiscover/autodiscover.json?@zdi/Powershell

HTTP client fingerprints (JA4H)

  • ge11nn0400_88d30a62b7ad

CVE report

CVE report

Open a specific CVE from the CVE tracker.