Zoho vulnerabilities

4 published CVEs name Zoho among the affected products.

Critical 0High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2021-33849
A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The…
Zoho · Zoho CRM Lead Magnet
Medium5.4
CVE-2016-1159
In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password…
ZOHO · Password Manager Pro (PMP)
Medium6.5
CVE-2017-11512
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the…
Zoho · ManageEngine ServiceDesk
High7.5
CVE-2017-11511
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for…
Zoho · ManageEngine ServiceDesk
High7.5