Vulnerabilities in ZohoCorp
89 resultsCVE-2025-9428HIGHSQL InjectionEPSS 27.4%CVE-2026-77690HIGHCommand injection vulnerabilityEPSS 15.6%CVE-2026-1367HIGHSQL InjectionEPSS 8.6%CVE-2026-76978HIGHCommand Injection vulnerabilityEPSS 8.1%CVE-2026-12269HIGHAuthenticated File Write to RCE via keepalived in DDI CentralEPSS 7.0%CVE-2026-19599CRITICALRemote Code Execution vulnerabilityEPSS 5.1%CVE-2026-86677HIGHBroken Authentication vulnerabilityEPSS 5.1%CVE-2026-6516CRITICALRemote Code ExecutionEPSS 4.7%CVE-2026-12268HIGHAuthenticated PowerShell Injection leads to RCEEPSS 4.7%CVE-2026-74849CRITICALRemote code execution vulnerabilityEPSS 4.6%CVE-2025-10020HIGHCommand InjectionEPSS 4.5%CVE-2025-9223HIGHCommand InjectionEPSS 4.1%CVE-2026-12267HIGHAuthenticated PowerShell Injection in DNS Query Resolution Policy leads to RCEEPSS 3.6%CVE-2026-12571CRITICALAuthentication Bypass Leading to Account TakeoverEPSS 3.3%CVE-2026-14828HIGHZohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 EPSS 3.1%CVE-2026-11840HIGHSQL InjectionEPSS 3.1%CVE-2026-18912HIGHManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticateEPSS 2.8%CVE-2026-86708CRITICALSensitive data exposureEPSS 2.7%CVE-2026-11374CRITICALAccount Takeover via Predictable SSO Ticket GenerationEPSS 2.5%CVE-2026-14913HIGHSQL Injection vulnerabilityEPSS 2.5%