Cve20207796 Zimbra Collaboration Suite Full !new! Access

Attackers use SSRF to probe and map out an organization’s internal network architecture.

The vulnerability is specifically linked to the WebEx Zimlet ( com_zimbra_webex ) when the Zimlet JSP functionality is enabled. cve20207796 zimbra collaboration suite full

Implement network-level restrictions to limit the Zimbra server’s outbound connections only to trusted destinations. Attackers use SSRF to probe and map out

The vulnerability impacts . Remediation and Mitigation it remains a major threat.

In some scenarios, it may be possible to steal login credentials or inject malware through chained exploits. Current Threat Status

While the vulnerability was first identified in 2020, it remains a major threat. , citing active exploitation in the wild. Organizations were given a due date of March 10, 2026, to apply mitigations. Affected Versions