Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Zoho Component: Salesiq Clear all filters
TI-2019-04253 CVE-2019-5963 · GHSA-3xg7-hprv-32gf

Cross-site request forgery in Zoho SalesIQ

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01026 Published 2019-07-05 No fix listed CWE-352
TI-2019-04252 CVE-2019-5962 · GHSA-4762-rg27-3278

Cross-site scripting in Zoho SalesIQ

Priority LOW 30

Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01587 Published 2019-07-05 No fix listed CWE-79