CVE-2020-7796 Synacor Zimbra Collaboration Suite
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.
- CVSS
- 9.8 Critical
- EPSS
- 94%
- Percentile
- 100
- Published
- 2020-02-18
- Force
- 10 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
- Added
- 2026-02-17
- Federal patch deadline
- 2026-03-10
- Ransomware use
- not known