CVE

CVE-2020-7796

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Synacor · Zimbra Collaboration Suite

Date added (CISA)

2026-02-17

Remediation due

2026-03-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.