← All advisories

Critical severity9.8CISA KEVNVD Advisory· Published Feb 18, 2020· Updated Jun 17, 2026

CVE-2020-7796

CVE-2020-7796

Description

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

VMware/Zimbra Collaboration Suite8 versions
cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*range: <8.8.15
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p2:*:*:*:*:*:*
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p4:*:*:*:*:*:*
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*
- cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*
Zimbra/Collaboration Suitedescription
Zimbra/Collaboration Serverllm-fuzzy
Range: < 8.8.15 Patch 7

Patches

Vulnerability mechanics

References

2

wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7nvdRelease NotesVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

0

No linked articles in our index yet.