netVigilance Vulnerability intelligence since 2004

Zoho

9 Zoho vulnerabilities with confirmed exploitation in the wild, as published by CISA; 9 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Zoho
Vulnerability Status
overdue 1262d2023-03-28 CVE-2022-28810 Zoho / ManageEngine Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability 2023-03-07 6.8 past due
overdue 1305d2023-02-13 CVE-2022-47966 Zoho / ManageEngine Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability 2023-01-23 9.8 past dueransomware
overdue 1428d2022-10-13 CVE-2022-35405 Zoho / ManageEngine Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability 2022-09-22 9.8 past due
overdue 1721d2021-12-24 CVE-2021-44515 Zoho / Desktop Central Zoho Desktop Central Authentication Bypass Vulnerability 2021-12-10 9.8 past due
overdue 1730d2021-12-15 CVE-2021-44077 Zoho / ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability 2021-12-01 9.8 past due
overdue 1730d2021-12-15 CVE-2021-37415 Zoho / ManageEngine ServiceDesk Plus (SDP) Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability 2021-12-01 9.8 past due
overdue 1758d2021-11-17 CVE-2021-40539 Zoho / ManageEngine Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2020-10189 Zoho / ManageEngine Zoho ManageEngine Desktop Central File Upload Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2019-8394 Zoho / ManageEngine Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability 2021-11-03 6.5 past due