Zoho known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 9 Zoho vulnerabilities: 0 added in the last 365 days, 7 rated critical (CVSS 9 or higher), and 2 with known ransomware use. The most recent was added Mar 7, 2023.

RSS feed for Zoho exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2023-03-07	CVE-2022-28810	Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability	6.8 (v3.1)	71.0%	2023-03-28	Unknown
2023-01-23	CVE-2022-47966	Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability	9.8 (v3.1)	99.8%	2023-02-13	Known
2022-09-22	CVE-2022-35405	Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability	9.8 (v3.1)	99.9%	2022-10-13	Unknown
2021-12-10	CVE-2021-44515	Zoho Desktop Central Authentication Bypass Vulnerability	9.8 (v3.1)	99.9%	2021-12-24	Unknown
2021-12-01	CVE-2021-37415	Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability	9.8 (v3.1)	99.8%	2021-12-15	Unknown
2021-12-01	CVE-2021-44077	Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability	9.8 (v3.1)	93.3%	2021-12-15	Unknown
2021-11-03	CVE-2019-8394	Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability	6.5 (v3.1)	63.3%	2022-05-03	Unknown
2021-11-03	CVE-2020-10189	Zoho ManageEngine Desktop Central File Upload Vulnerability	9.8 (v3.0)	>99.9%	2022-05-03	Unknown
2021-11-03	CVE-2021-40539	Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability	9.8 (v3.1)	99.0%	2021-11-17	Known