Vulnerabilities in ZohoCorp

72 results
Vexday analysis

Zoho Corp apresenta um perfil de risco baixo com apenas 2 CVEs catalogadas, nenhuma sob exploração ativa conhecida. Ambas as vulnerabilidades foram publicadas recentemente (últimos 90 dias) e relacionadas a injeção de comando (CWE-78), porém sem classificação crítica, indicando severidade moderada que requer monitoramento mas não constitui ameaça imediata.

CVE-2025-9428HIGHSQL InjectionEPSS 27.4%CVE-2026-1367HIGHSQL InjectionEPSS 7.7%CVE-2026-6516CRITICALRemote Code ExecutionEPSS 4.7%CVE-2026-74849CRITICALRemote code execution vulnerabilityEPSS 4.6%CVE-2025-10020HIGHCommand InjectionEPSS 4.5%CVE-2025-9223HIGHCommand InjectionEPSS 4.2%CVE-2026-2740HIGHRemote Code ExecutionEPSS 4.0%CVE-2026-76978HIGHCommand Injection vulnerabilityEPSS 3.7%CVE-2026-12571CRITICALAuthentication Bypass Leading to Account TakeoverEPSS 3.3%CVE-2026-11840HIGHSQL InjectionEPSS 3.1%CVE-2026-19599CRITICALRemote Code Execution vulnerabilityEPSS 2.9%CVE-2026-5785HIGHSQL InjectionEPSS 2.6%CVE-2026-11374CRITICALAccount Takeover via Predictable SSO Ticket GenerationEPSS 2.5%CVE-2026-92905MEDIUMDenial of Service VulnerabilityEPSS 2.4%CVE-2026-3324HIGHAuthentication BypassEPSS 2.1%CVE-2026-86677HIGHBroken Authentication vulnerabilityEPSS 2.0%CVE-2026-16053HIGHPath TraversalEPSS 1.8%CVE-2025-8324CRITICALSQL InjectionEPSS 1.7%CVE-2026-75791HIGHAuthentication bypass vulnerabilityEPSS 1.7%CVE-2025-11250CRITICALAuthentication BypassEPSS 1.6%