Read the docs

Zoho

Records23All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Zoho records in CISA KEV
TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Priority CRITICAL 89KEV 2023-03-07TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-01-23TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-09-22TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-10TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-01TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Salesiq 4 records MEDIUM Zoho Campaigns 2 records LOW Lead Magnet 1 record LOW Manageengine Remote Access Plus Server 1 record LOW Marketing Automation 1 record LOW Zoho Books - Accounting App 1 record LOW

Records

1 record in Zoho Books - Accounting App · all components

TI-2014-05525 CVE-2014-6686 · GHSA-x2xx-35v4-97pg

The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does…

Priority LOW 24

The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive infor…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-23 No fix listed CWE-310
Open these records in search →