Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Zoho Mail records in CISA KEVNo Zoho Mail vulnerabilities are listed in CISA KEV.
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affects Zoho ZeptoMail: from n/a through <= 3.3.1.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00108 · Published 2025-12-31 · No fix listed CWE-352
Priority LOW 20
Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2026-02-20 · No fix listed CWE-862
