Vendor
Zoho
19 known vulnerabilities in products by Zoho, 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-11512 | Zoho ManageEngine ServiceDesk: Path Traversal | 7.5 | |
| High | CVE-2017-11511 | Zoho ManageEngine ServiceDesk: Path Traversal | 7.5 | |
| Medium | CVE-2016-1159 | ZOHO Password Manager Pro (PMP): Information Disclosure | 6.5 | |
| High | CVE-2019-5963 | Zoho SalesIQ: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2019-5962 | Zoho SalesIQ: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2019-15645 | Zoho SalesIQ: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2026-77697 | Privilege Escalation | 6.3 | |
| Medium | CVE-2026-85640 | Privilege Escalation | 6.3 | |
| Medium | CVE-2026-3182 | Sensitive Data Exposure | 4.3 | |
| High | CVE-2024-37225 | WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability | 8.5 | |
| Medium | CVE-2021-33849 | Zoho CRM Lead Magnet: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2019-19306 | Zoho Lead Magnet: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2021-42956 | Zoho Manageengine Remote Access Plus Server: Information Disclosure | 7.8 | |
| Medium | CVE-2026-77698 | Privilege Escalation | 5.7 | |
| Medium | CVE-2019-15644 | Zoho SalesIQ: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-77699 | Privilege Escalation | 5.0 | |
| High | CVE-2024-32441 | WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability | 4.3 | |
| High | CVE-2024-32442 | WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability | 4.3 | |
| Not rated | CVE-2014-6686 | Zoho Books - Accounting App: Information Disclosure | — |
Products
| Manageengine Endpoint Central | 5 | 0 |
| Zoho SalesIQ | 4 | 0 |