Zoho
CVEs currently on EVULNABLE's Priority Feed for Zoho, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 9 Zoho CVEs in EVULNABLE's ranked feed.
#1 94 Immediate CVE-2022-47966 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability KEV + ransomware, EPSS 99.8%
EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 93 Immediate CVE-2021-40539 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.0%
EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 87 Immediate CVE-2020-10189 ExigentKEV since 2021 · listed over a yearCISA KEV Zoho — Zoho ManageEngine Desktop Central File Upload Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#4 87 Immediate CVE-2022-35405 ExigentKEV since 2022 · listed over a yearCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#5 87 Immediate CVE-2021-44515 ExigentKEV since 2021 · listed over a yearCISA KEV Zoho — Zoho Desktop Central Authentication Bypass Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#6 87 Immediate CVE-2021-37415 ExigentKEV since 2021 · listed over a yearCISA KEV Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability KEV, EPSS 99.8%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#7 85 Immediate CVE-2021-44077 ExigentKEV since 2021 · listed over a yearCISA KEV Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability KEV, EPSS 93.3%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.933.
#8 75 Urgent CVE-2022-28810 KEV since 2023 · listed over a yearCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability KEV, EPSS 71.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.710.
#9 75 Urgent CVE-2019-8394 KEV since 2021 · listed over a yearCISA KEV Zoho — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability KEV, EPSS 63.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.633.