CyberSec.Space Logo
Back to CVE Browser

CVE-2020-7796

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score65.2240%
EPSS Percentile90.13th
PublishedFeb 18, 2020
Last ModifiedFeb 18, 2026

Vulnerability Description

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

Affected Platforms (CPE)

📦
Synacor

Zimbra Collaboration Suite

< 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15
📦
Synacor

Zimbra Collaboration Suite

= 8.8.15

References & Advisories

🔗 https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7
🔗 https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-7796

Related Vulnerabilities

CVE-2019-96709.8

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnera...

CVE-2018-201609.8

ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other ...

CVE-2019-69809.8

Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.

CVE-2021-352099.8

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9....