Zscaler

Records59All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high36CVSS 7.0–8.9

Exploited now

Zscaler records in CISA KEV

No Zscaler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Client Connector 41 records MEDIUM Zscaler Internet Access Admin Portal 3 records MEDIUM Secure Internet And Saas Access 1 record LOW Zscaler Proxy 1 record MEDIUM

Records

3 records in Zscaler Internet Access Admin Portal · all components

TI-2023-13311 CVE-2023-28801 · GHSA-wfp5-6m78-crh3

Improper SAML signature verification

MEDIUM 43

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00391 Published 2023-08-31 Fixed in 6.2 (current) CWE-347

TI-2026-18135 CVE-2026-22567 · GHSA-pj4q-4jcg-hp2c

ZIA Admin UI Input Validation Bug

LOW 33

Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00223 Published 2026-02-23 Fixed in 6.2r CWE-20

TI-2026-18136 CVE-2026-22568 · GHSA-p76h-f4cx-3273

Unauthorized information retrieval in ZIA Admin UI

LOW 24

Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00187 Published 2026-02-23 Fixed in 6.2r CWE-20

Open these records in search →