Zoho

In 2 briefs, most recently 30 June 2026. RSS for this tag

Known exploited (CISA KEV)

9 Zoho vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 2 of them used in ransomware campaigns. Most recent:

CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability added 2023-03-07
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability added 2023-01-23
CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability added 2022-09-22
CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability added 2021-12-10
CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability added 2021-12-01
CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability added 2021-12-01
CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability added 2021-11-03
CVE-2020-10189 Zoho ManageEngine Desktop Central File Upload Vulnerability added 2021-11-03