Vulnerabilities in zohocorp

43 results
Vexday analysis

A Zoho Corporation apresenta footprint reduzido de vulnerabilidades com apenas 1 CVE registrado, classificado como crítico e relacionado a falha de autenticação (CWE-287). Embora nenhuma vulnerabilidade esteja sob exploração ativa conhecida, a recente publicação nos últimos 90 dias recomenda atenção imediata, particularmente em ambientes que dependem da autenticação como controle de segurança primário.

CVE-2025-9428HIGHSQL InjectionEPSS 25.7%CVE-2026-1367HIGHSQL InjectionEPSS 7.4%CVE-2026-6516CRITICALRemote Code ExecutionEPSS 4.7%CVE-2025-10020HIGHCommand InjectionEPSS 4.7%CVE-2025-9223HIGHCommand InjectionEPSS 4.2%CVE-2026-11374CRITICALAccount Takeover via Predictable SSO Ticket GenerationEPSS 2.0%CVE-2025-8324CRITICALSQL InjectionEPSS 1.7%CVE-2026-2740HIGHRemote Code ExecutionEPSS 1.7%CVE-2025-11250CRITICALAuthentication BypassEPSS 1.4%CVE-2026-5785HIGHSQL InjectionEPSS 1.4%CVE-2026-3324HIGHAuthentication BypassEPSS 1.3%CVE-2025-1724HIGHAccount TakeoverEPSS 1.2%CVE-2025-5342MEDIUMDenial of Service (DoS)EPSS 1.1%CVE-2025-9787MEDIUMStored XSSEPSS 1.0%CVE-2025-6239MEDIUMInformation disclosureEPSS 0.9%CVE-2025-11669HIGHBroken Access ControlEPSS 0.7%CVE-2026-28756HIGHStored XSS VulnerabilityEPSS 0.5%CVE-2026-3880HIGHStored XSS VulnerabilityEPSS 0.5%CVE-2026-28754HIGHStored XSS VulnerabilityEPSS 0.5%CVE-2026-4108HIGHStored XSS VulnerabilityEPSS 0.5%