Read the docs

Zoho

Records23All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Zoho records in CISA KEV
TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Priority CRITICAL 89KEV 2023-03-07TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-01-23TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-09-22TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-10TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-01TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Salesiq 4 records MEDIUM Zoho Campaigns 2 records LOW Lead Magnet 1 record LOW Manageengine Remote Access Plus Server 1 record LOW Marketing Automation 1 record LOW Zoho Books - Accounting App 1 record LOW

Records

4 records in Salesiq · all components

TI-2019-04253 CVE-2019-5963 · GHSA-3xg7-hprv-32gf

Cross-site request forgery in Zoho SalesIQ

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01026 Published 2019-07-05 No fix listed CWE-352
TI-2019-04252 CVE-2019-5962 · GHSA-4762-rg27-3278

Cross-site scripting in Zoho SalesIQ

Priority LOW 30

Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01587 Published 2019-07-05 No fix listed CWE-79
Open these records in search →