Zoho

Records23All Threatist records

Exploited (KEV)9In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Zoho records in CISA KEV

TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability CRITICAL 89KEV 2023-03-07 TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2023-01-23 TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-09-22 TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability CRITICAL 100KEV 2021-12-10 TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability CRITICAL 100KEV 2021-12-01 TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records

Salesiq 4 records MEDIUM Zoho Campaigns 2 records LOW Lead Magnet 1 record LOW Manageengine Remote Access Plus Server 1 record LOW Marketing Automation 1 record LOW Zoho Books - Accounting App 1 record LOW

Records

2 records in Zoho Campaigns · all components

TI-2024-21337 CVE-2024-32442 · GHSA-mgjj-8mgv-mcr2

WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-04-15 No fix listed CWE-352

TI-2024-21336 CVE-2024-32441 · GHSA-gf48-8xc3-3r9j

WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-04-15 No fix listed CWE-352

Open these records in search →