Read the docs

Zscaler

Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Zscaler records in CISA KEV

No Zscaler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Client Connector 41 records MEDIUM Zscaler Internet Access Admin Portal 3 records MEDIUM Secure Internet And Saas Access 1 record LOW Zscaler Proxy 1 record MEDIUM

Records

1 record in Secure Internet And Saas Access · all components

TI-2023-13317 CVE-2023-28807 · GHSA-p774-6cp5-x7cj

Bypass of ZIA domain fronting detection module through evasion technique

Priority LOW 33

In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traff…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2024-01-31 Fixed in 6.2r.290 CWE-295
Open these records in search →