Zentao

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Zentao records in CISA KEV

No Zentao vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Biz · all components

TI-2023-24965 CVE-2023-46375 · GHSA-3pmr-9m67-9h7q

HIGH 73

ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00333 Published 2023-10-27 No fix listed CWE-352

TI-2023-24966 CVE-2023-46376 · GHSA-6pvg-63w9-jhx6

HIGH 72

Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2023-10-27 No fix listed CWE-312

TI-2023-25032 CVE-2023-46491 · GHSA-xpmf-rjrc-7rc4

MEDIUM 60

ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-26 No fix listed CWE-79

TI-2023-24964 CVE-2023-46374 · GHSA-7j46-2fmc-fw7w

MEDIUM 60

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-26 No fix listed CWE-79