Zentao

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Zentao records in CISA KEV

No Zentao vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zentao 5 records MEDIUM Biz 4 records HIGH

Records

9 records

TI-2023-24965 CVE-2023-46375 · GHSA-3pmr-9m67-9h7q

ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).

HIGH 73

ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00333 Published 2023-10-27 No fix listed CWE-352

TI-2023-24966 CVE-2023-46376 · GHSA-6pvg-63w9-jhx6

Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.

HIGH 72

Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2023-10-27 No fix listed CWE-312

TI-2023-25032 CVE-2023-46491 · GHSA-xpmf-rjrc-7rc4

ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.

MEDIUM 60

ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-26 No fix listed CWE-79

TI-2023-24964 CVE-2023-46374 · GHSA-7j46-2fmc-fw7w

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

MEDIUM 60

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-26 No fix listed CWE-79

TI-2026-02177 CVE-2026-2551 · GHSA-8crw-7238-r6f8

ZenTao Backup control.php delete path traversal

MEDIUM 57

A vulnerability was determined in ZenTao up to 21.7.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00527 Published 2026-02-16 No fix listed CWE-22

TI-2025-12604 CVE-2025-13789 · GHSA-px5m-vp2j-j7xw

ZenTao model.php makeRequest server-side request forgery

MEDIUM 57

A vulnerability was found in ZenTao up to 21.7.6-8564.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00322 Published 2025-11-30 Fixed in 21.7.6 CWE-918

TI-2025-12602 CVE-2025-13787 · GHSA-v63q-x4cm-x632

ZenTao File control.php delete privileges management

MEDIUM 57

A flaw has been found in ZenTao up to 21.7.6-8564.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0041 Published 2025-11-30 Fixed in 21.7.7 CWE-266

TI-2026-02178 CVE-2026-2552 · GHSA-m22r-r587-48f7

ZenTao Editor control.php delete path traversal

MEDIUM 56

A vulnerability was identified in ZenTao up to 21.7.8.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00424 Published 2026-02-16 Fixed in 21.7.9 CWE-22

TI-2026-01551 CVE-2026-1884 · GHSA-rxcq-q6q7-hm9r

ZenTao Webhook model.php fetchHook server-side request forgery

MEDIUM 56

A weakness has been identified in ZenTao up to 21.7.6-85642.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00423 Published 2026-02-04 No fix listed CWE-918

Open these records in search →

Critical	0
High	2
Medium	7
Low	0
No CVSS	0