Launchpad.net

CVE 2019-14258

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.

See the CVE page on Mitre.org for more details.