Read the docs

Zoho

Records23All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Zoho records in CISA KEV
TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Priority CRITICAL 89KEV 2023-03-07TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-01-23TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-09-22TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-10TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-01TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Salesiq 4 records MEDIUM Zoho Campaigns 2 records LOW Lead Magnet 1 record LOW Manageengine Remote Access Plus Server 1 record LOW Marketing Automation 1 record LOW Zoho Books - Accounting App 1 record LOW

Records

1 record in Marketing Automation · all components

TI-2024-24740 CVE-2024-37225 · GHSA-m84w-3jq7-hjcm

WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2024-07-09 No fix listed CWE-89
Open these records in search →