Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Zscaler Component: Zscaler Internet Access Admin Portal Clear all filters
TI-2026-18135 CVE-2026-22567 · GHSA-pj4q-4jcg-hp2c

ZIA Admin UI Input Validation Bug

Priority LOW 33

Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00223 Published 2026-02-23 Fixed in 6.2r CWE-20
TI-2026-18136 CVE-2026-22568 · GHSA-p76h-f4cx-3273

Unauthorized information retrieval in ZIA Admin UI

Priority LOW 24

Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00187 Published 2026-02-23 Fixed in 6.2r CWE-20
TI-2023-13311 CVE-2023-28801 · GHSA-wfp5-6m78-crh3

Improper SAML signature verification

Priority MEDIUM 43

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00391 Published 2023-08-31 Fixed in 6.2 (current) CWE-347