PT-2020-19795 · Zimbra+1 · Zimbra Collaboration Suite+1

Published 2020-02-13 · Updated 2026-02-20 · CVE-2020-7796

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite (ZCS) versions prior to 8.8.15 Patch 7

Description The software is susceptible to a Server-Side Request Forgery (SSRF) attack when the WebEx zimlet is installed and the zimlet JSP is enabled. A recent surge in the exploitation of SSRF vulnerabilities has been observed, with over 400 distinct IPs identified exploiting multiple flaws. Notable attacks have been reported in the U.S., Germany, and Israel. This allows attackers to map internal networks, find vulnerable services, and potentially steal sensitive cloud credentials.

Recommendations Update Zimbra Collaboration Suite (ZCS) to version 8.8.15 Patch 7 or later.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-02233

CVE-2020-7796

Affected Products

Webex Zimlet

Zimbra Collaboration Suite

References · 24

• https://nvd.nist.gov/vuln/detail/CVE-2020-7796 · Security Note
• https://bdu.fstec.ru/vul/2026-02233 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7796 · Vendor Advisory
• https://reddit.com/r/pwnhub/comments/1j9suze/coordinated_cyber_attack_over_400_ips_exploit · Reddit Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-7796 · Note
• https://twitter.com/Tejaskumar172/status/2024339134928867546 · Twitter Post
• https://twitter.com/AIDE_ink/status/1902576349262589991 · Twitter Post
• https://t.me/thehackernews/6480 · Telegram Post
• https://twitter.com/ThreatSynop/status/2024089016795095051 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1r8wba2/top_10_trending_cves_19022026 · Reddit Post
• https://twitter.com/johndjohnson/status/2024839497188544559 · Twitter Post
• https://t.me/true_secator/6843 · Telegram Post
• https://twitter.com/ThreatSynop/status/2024637889095614500 · Twitter Post
• https://twitter.com/DarkWebInformer/status/2023865581603016836 · Twitter Post
• https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7 · Security Note, Vendor Advisory