BLACKOUT MAP

Synacor · Zimbra Collaboration Suite

CVE-2020-7796

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

공격에 악용됨 치명적 9.8 공격 가능성: 94%
공유

무엇인가

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

CISA: Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.

할 일

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

미국 연방 기관 조치 기한: 2026년 3월 10일

CISA 목록에 추가됨
2026년 2월 17일
게시됨
2020년 2월 18일
심각도
치명적 9.8 CVSS 3.1
향후 30일 내 공격 가능성(EPSS)
94% 알려진 모든 취약점 중 상위 0.2%
약점 유형
CWE-918
자세히
NVD · CVE.org · CISA
모든 참고 자료(1)

Synacor의 다른 악용된 결함

추가됨취약점제품심각도공격 가능성
2026. 8. 21.OS Command InjectionCVE-2026-73570Zimbra Collaboration Suite (ZCS)높음 8.972%
2026. 4. 20.Cross-site ScriptingCVE-2025-48700Zimbra Collaboration Suite (ZCS)보통 6.11.7%
2026. 3. 18.Cross-Site ScriptingCVE-2025-66376Zimbra Collaboration Suite (ZCS)높음 7.220%
2026. 1. 22.Zimbra Collaboration Suite (ZCS) PHP Remote File InclusionCVE-2025-68645 Zimbra Collaboration Suite (ZCS)높음 8.849%
2025. 10. 7.Cross-site ScriptingCVE-2025-27915Zimbra Collaboration Suite (ZCS)보통 5.44.1%
2025. 7. 7.Server-Side Request Forgery (SSRF)CVE-2019-9621Zimbra Collaboration Suite (ZCS)높음 7.581%
2025. 5. 19.Cross-Site Scripting (XSS)CVE-2024-27443Zimbra Collaboration Suite (ZCS)보통 6.125%
2025. 2. 25.Cross-Site Scripting (XSS)CVE-2023-34192Zimbra Collaboration Suite (ZCS)치명적 9.077%

모두 →

출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.