CVE-2020-7796

9.8 criticalKEVEPSS 94%

Critical (9.8) in Synacor Zimbra Collaboration Suite. In CISA KEV since 2026-02-17. EPSS 94% chance of exploitation in the next 30 days.

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 94% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2026-02-17, due 2026-03-10
CWE: CWE-918
Published: 2020-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19