Zoho vulnerabilities

Products

• Manageengine 6
• Salesiq 4
• Manageengine Servicedesk 2
• Manageengine Servicedesk Plus 2
• Campaigns 2

Newest

• zoho marketing automation WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability CVE-2024-37225 8.5 HighJuly 9, 2024
• zoho campaigns WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32441 4.3 MediumApril 15, 2024
• zoho campaigns WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32442 4.3 MediumApril 15, 2024
• zoho campaigns WordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability CVE-2024-30239 8.5 HighMarch 28, 2024
• zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 more Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow... CVE-2022-47966 In KEVPublic exploit EPSS 99.8% 9.8 CriticalJanuary 18, 2023
• zoho manageengine, zohocorp manageengine access manager plus, manageengine password manager pro +1 more +3 more Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to... CVE-2022-35405 In KEVPublic exploit EPSS 99.9% 9.8 CriticalJuly 19, 2022
• zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote... CVE-2022-28810 In KEVPublic exploit EPSS 71.0% 6.8 MediumApril 18, 2022
• zoho desktop central, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code... CVE-2021-44515 In KEV EPSS 99.9% 9.8 CriticalDecember 12, 2021
• zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 more Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and... CVE-2021-44077 In KEVPublic exploit EPSS 93.3% 9.8 CriticalNovember 29, 2021
• zoho manageengine remote access plus server Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a... CVE-2021-42956 7.8 HighNovember 17, 2021
• zoho crm lead magnet, zohocorp zoho crm lead magnet +1 more A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s... CVE-2021-33849 5.4 MediumOctober 5, 2021
• zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API... CVE-2021-40539 In KEVPublic exploit EPSS 99.0% 9.8 CriticalSeptember 7, 2021
• zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 more Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that... CVE-2021-37415 In KEV EPSS 99.8% 9.8 CriticalSeptember 1, 2021
• zoho manageengine servicedesk plus Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows... CVE-2021-20081 EPSS 52.4% 7.2 HighJune 10, 2021
• zoho manageengine servicedesk plus Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and... CVE-2021-20080 EPSS 93.1% 6.1 MediumApril 9, 2021
• zoho password manager pro (pmp), zohocorp manageengine password manager pro +1 more In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402),... CVE-2016-1159 6.5 MediumMarch 9, 2020
• zoho manageengine, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of... CVE-2020-10189 In KEVPublic exploit EPSS 99.9% 9.8 CriticalMarch 6, 2020
• zoho lead magnet The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or... CVE-2019-19306 5.4 MediumNovember 26, 2019
• zoho salesiq The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF. CVE-2019-15645 8.8 HighAugust 27, 2019
• zoho salesiq The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS. CVE-2019-15644 6.1 MediumAugust 27, 2019
• zoho salesiq Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote... CVE-2019-5963 8.8 HighJuly 5, 2019
• zoho salesiq Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to... CVE-2019-5962 6.1 MediumJuly 5, 2019
• zoho manageengine, zohocorp manageengine servicedesk plus +1 more Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to... CVE-2019-8394 In KEVPublic exploit EPSS 63.3% 6.5 MediumFebruary 17, 2019
• manageengine servicedesk, zoho manageengine servicedesk +1 more The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper... CVE-2017-11512 EPSS 79.6% 7.5 HighNovember 8, 2017
• manageengine servicedesk, zoho manageengine servicedesk +1 more The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper... CVE-2017-11511 7.5 HighNovember 8, 2017
• zoho books - accounting app The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not... CVE-2014-6686 5.4 MediumSeptember 23, 2014