Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

심각 9.8EXPLOITED (CISA KEV)CVE-2020-7796 · Published 18/02/2020 · updated 17/06/2026

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 17/02/2026. Patch affected systems as an emergency.

요약

CVE-2020-7796은(는) zimbra collaboration suite (synacor)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
실제 악용 중: CISA가 17/02/2026에 KEV 목록에 추가했습니다.
향후 30일 내 악용 확률(EPSS): 93.6%, 전체 취약점의 99.8%보다 높음.
조치: 8.8.15 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
zimbra collaboration suite synacor	`= 8.8.15< 8.8.15`	`8.8.15`

Description

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

References

wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7 · Release Notes
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2020-7796

zimbra collaboration suite의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

요약

CVE-2020-7796은(는) zimbra collaboration suite (synacor)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.

실제 악용 중: CISA가 17/02/2026에 KEV 목록에 추가했습니다.

향후 30일 내 악용 확률(EPSS): 93.6%, 전체 취약점의 99.8%보다 높음.

조치: 8.8.15 이상으로 업데이트하세요.

Package

Affected versions

Patched versions

zimbra collaboration suite

synacor

= 8.8.15< 8.8.15

8.8.15

zimbra collaboration suite의 다른 취약점

모두 보기 →