CVE-2020-18985: Synacor Zimbra Collaboration Suite

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.

Affected products

• Synacor Zimbra Collaboration Suite: version 8.8.12 only

Published 2021-12-15. Last modified 2026-06-17.