CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-18
Zimbra Collaboration Suite (ZCS) WebEx Zimlet SSRF Vulnerability (CVE-2020-7796) Security Advisory
[Affected Scope] Zimbra Collaboration Suite (ZCS) versions prior to 8.8.15 Patch 7 with WebEx zimlet installed and zimlet JSP enabled
[Impact] Unauthenticated remote attackers can exploit Server-Side Request Forgery (SSRF) to access internal network resources, extract sensitive data, or pivot to further remote code execution (RCE)
[Mitigation] Immediately upgrade Zimbra Collaboration Suite to 8.8.15 Patch 7 or later, or disable and undeploy the unused WebEx zimlet