[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-7796":6},{"stargazers_count":4,"fetched_at":5},5,"2026-04-07T09:11:40.124Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":27,"related":28,"reserved_at":9,"published_at":29,"modified_at":30,"state":31,"summary":32,"references_raw":42,"kevs":57,"epss":68,"epss_history":71,"metrics":278,"affected":290},"CVE-2020-7796","Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-918","Server-Side Request Forgery (SSRF)","The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","weakness","Incomplete","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-664","Server Side Request Forgery",[],[],[],[],[],[],[],"2020-02-18T21:14:22.000Z","2026-02-18T04:56:25.831Z","Analyzed",{"cisa_kev":33,"cisa_ransomware":34,"cisa_vendor":35,"epss_severity":36,"epss_score":37,"severity":36,"severity_score":38,"severity_version":39,"severity_source":40,"severity_vector":41,"severity_status":31},true,false,"Synacor","critical",0.92853,9.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[43,51],{"url":44,"sources":45,"tags":47},"https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7",[46,40],"cve.org",[48,49,50],"X Refsource CONFIRM","Release Notes","Vendor Advisory",{"url":52,"sources":53,"tags":54},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-7796",[46,40],[55,56],"Government Resource","US Government Resource",[58],{"source":59,"vendor":35,"product":60,"date_added":61,"vulnerability_name":62,"short_description":63,"required_action":64,"due_date":65,"known_ransomware_campaign_use":66,"notes":67,"exploitation_type":9},"cisa","Zimbra Collaboration Suite","2026-02-17","Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","2026-03-10","Unknown","https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7 ; https://nvd.nist.gov/vuln/detail/CVE-2020-7796",{"date":69,"score":37,"percentile":70},"2026-04-06",0.99766,[72,76,79,81,84,86,89,91,93,95,97,99,101,103,105,109,112,115,118,120,122,125,127,129,131,133,135,137,141,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,177,179,181,184,187,189,191,193,195,198,200,202,204,207,210,212,214,216,218,220,222,224,227,229,231,233,235,238,240,242,245,247,249,251,253,255,257,260,262,264,266,268,271,273,275],{"date":73,"score":74,"percentile":75},"2025-11-04",0.90602,0.99586,{"date":77,"score":74,"percentile":78},"2025-11-05",0.99585,{"date":80,"score":74,"percentile":78},"2025-11-06",{"date":82,"score":74,"percentile":83},"2025-11-07",0.99584,{"date":85,"score":74,"percentile":83},"2025-11-08",{"date":87,"score":74,"percentile":88},"2025-11-09",0.99583,{"date":90,"score":74,"percentile":88},"2025-11-10",{"date":92,"score":74,"percentile":88},"2025-11-11",{"date":94,"score":74,"percentile":88},"2025-11-12",{"date":96,"score":74,"percentile":88},"2025-11-13",{"date":98,"score":74,"percentile":88},"2025-11-14",{"date":100,"score":74,"percentile":88},"2025-11-15",{"date":102,"score":74,"percentile":88},"2025-11-16",{"date":104,"score":74,"percentile":88},"2025-11-17",{"date":106,"score":107,"percentile":108},"2025-11-18",0.70423,0.98727,{"date":110,"score":107,"percentile":111},"2025-11-19",0.98728,{"date":113,"score":107,"percentile":114},"2025-11-20",0.98729,{"date":116,"score":74,"percentile":117},"2025-11-21",0.99582,{"date":119,"score":74,"percentile":117},"2025-11-22",{"date":121,"score":74,"percentile":117},"2025-11-23",{"date":123,"score":74,"percentile":124},"2025-11-24",0.99581,{"date":126,"score":74,"percentile":124},"2025-11-25",{"date":128,"score":74,"percentile":124},"2025-11-26",{"date":130,"score":74,"percentile":124},"2025-11-27",{"date":132,"score":74,"percentile":124},"2025-11-28",{"date":134,"score":74,"percentile":124},"2025-11-29",{"date":136,"score":74,"percentile":117},"2025-11-30",{"date":138,"score":139,"percentile":140},"2025-12-01",0.89389,0.99525,{"date":142,"score":139,"percentile":143},"2025-12-02",0.99526,{"date":145,"score":139,"percentile":143},"2025-12-03",{"date":147,"score":74,"percentile":88},"2025-12-04",{"date":149,"score":74,"percentile":88},"2025-12-05",{"date":151,"score":74,"percentile":88},"2025-12-06",{"date":153,"score":74,"percentile":83},"2025-12-07",{"date":155,"score":74,"percentile":78},"2025-12-08",{"date":157,"score":74,"percentile":83},"2025-12-09",{"date":159,"score":74,"percentile":78},"2025-12-10",{"date":161,"score":74,"percentile":83},"2025-12-11",{"date":163,"score":74,"percentile":83},"2025-12-12",{"date":165,"score":74,"percentile":83},"2025-12-13",{"date":167,"score":74,"percentile":83},"2025-12-14",{"date":169,"score":74,"percentile":83},"2025-12-15",{"date":171,"score":74,"percentile":78},"2025-12-16",{"date":173,"score":74,"percentile":75},"2025-12-17",{"date":175,"score":74,"percentile":176},"2025-12-18",0.99587,{"date":178,"score":74,"percentile":176},"2025-12-19",{"date":180,"score":74,"percentile":176},"2025-12-20",{"date":182,"score":74,"percentile":183},"2025-12-21",0.99588,{"date":185,"score":74,"percentile":186},"2025-12-22",0.99589,{"date":188,"score":74,"percentile":183},"2025-12-23",{"date":190,"score":74,"percentile":183},"2025-12-24",{"date":192,"score":74,"percentile":186},"2025-12-25",{"date":194,"score":74,"percentile":186},"2025-12-26",{"date":196,"score":74,"percentile":197},"2025-12-27",0.99591,{"date":199,"score":74,"percentile":186},"2025-12-28",{"date":201,"score":74,"percentile":186},"2025-12-29",{"date":203,"score":74,"percentile":186},"2025-12-30",{"date":205,"score":74,"percentile":206},"2025-12-31",0.9959,{"date":208,"score":139,"percentile":209},"2026-01-01",0.99533,{"date":211,"score":139,"percentile":209},"2026-01-02",{"date":213,"score":139,"percentile":209},"2026-01-03",{"date":215,"score":74,"percentile":197},"2026-01-04",{"date":217,"score":74,"percentile":197},"2026-01-05",{"date":219,"score":74,"percentile":197},"2026-01-06",{"date":221,"score":74,"percentile":197},"2026-01-07",{"date":223,"score":74,"percentile":197},"2026-01-08",{"date":225,"score":74,"percentile":226},"2026-01-09",0.99592,{"date":228,"score":74,"percentile":226},"2026-01-10",{"date":230,"score":74,"percentile":226},"2026-01-11",{"date":232,"score":74,"percentile":226},"2026-01-12",{"date":234,"score":74,"percentile":226},"2026-01-13",{"date":236,"score":74,"percentile":237},"2026-01-14",0.99593,{"date":239,"score":74,"percentile":237},"2026-01-15",{"date":241,"score":74,"percentile":237},"2026-01-16",{"date":243,"score":74,"percentile":244},"2026-01-17",0.99594,{"date":246,"score":74,"percentile":226},"2026-01-18",{"date":248,"score":74,"percentile":226},"2026-01-19",{"date":250,"score":74,"percentile":226},"2026-01-20",{"date":252,"score":74,"percentile":226},"2026-01-21",{"date":254,"score":74,"percentile":237},"2026-01-22",{"date":256,"score":74,"percentile":244},"2026-01-23",{"date":258,"score":74,"percentile":259},"2026-01-24",0.99595,{"date":261,"score":74,"percentile":259},"2026-01-25",{"date":263,"score":74,"percentile":259},"2026-01-26",{"date":265,"score":74,"percentile":259},"2026-01-27",{"date":267,"score":74,"percentile":259},"2026-01-28",{"date":269,"score":74,"percentile":270},"2026-01-29",0.99596,{"date":272,"score":74,"percentile":270},"2026-01-30",{"date":274,"score":74,"percentile":270},"2026-01-31",{"date":276,"score":139,"percentile":277},"2026-02-01",0.9954,[279,288],{"source":40,"cvss_v2_0":280,"cvss_v3_0":9,"cvss_v3_1":285,"cvss_v4_0":9},{"baseScore":281,"baseSeverity":9,"vectorString":282,"impactScore":283,"exploitabilityScore":284},6.8,"AV:N/AC:M/Au:N/C:P/I:P/A:P",6.4,8.6,{"baseScore":38,"baseSeverity":286,"vectorString":41,"impactScore":38,"exploitabilityScore":287},"CRITICAL",10,{"source":46,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":289,"cvss_v4_0":9},{"baseScore":38,"baseSeverity":286,"vectorString":41,"impactScore":38,"exploitabilityScore":287},[291],{"ecosystem":9,"name":60,"vendor":9,"product":60,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":292},[293,298,299,301,303,305,307,309],{"version":294,"is_range":33,"range_type":295,"version_start":9,"version_start_type":9,"version_end":296,"version_end_type":297,"fixed_in":9},"lt8.8.15","cpe","8.8.15","excluding",{"version":296,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":300,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8.15:p1",{"version":302,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8.15:p2",{"version":304,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8.15:p3",{"version":306,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8.15:p4",{"version":308,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8.15:p5",{"version":310,"is_range":34,"range_type":295,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8.15:p6"]