CVE-2020-7796

Produto

Synacor / Zimbra Collaboration Suite

Vulnerabilidade

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Adicionado ao KEV

17 de fev. de 2026

Corrigir até

10 de mar. de 2026

Uso conhecido em ransomware

Não

Descrição resumida

Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7 ; https://nvd.nist.gov/vuln/detail/CVE-2020-7796