Cyber threats / Vulnerabilities

CVE-2020-7796

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
93.6%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.

Vendor
Synacor
Product
Zimbra Collaboration Suite
Added to KEV
Feb 17, 2026
Remediation due
Mar 10, 2026 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-918
EPSS
93.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References