Zoho

Records23All Threatist records

Exploited (KEV)9In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Zoho records in CISA KEV

TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability CRITICAL 89KEV 2023-03-07 TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2023-01-23 TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-09-22 TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability CRITICAL 100KEV 2021-12-10 TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability CRITICAL 100KEV 2021-12-01 TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records

Salesiq 4 records MEDIUM Zoho Campaigns 2 records LOW Lead Magnet 1 record LOW Manageengine Remote Access Plus Server 1 record LOW Marketing Automation 1 record LOW Zoho Books - Accounting App 1 record LOW

Records

1 record in Lead Magnet · all components

TI-2019-13922 CVE-2019-19306 · GHSA-chx2-38r8-vmph

The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.

LOW 27

The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01068 Published 2019-11-26 No fix listed CWE-79

Open these records in search →