Exploited vulnerabilities
Zoho
9 Zoho vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue9
Last 12 months0
In ransomware campaigns2
Last addition7 March 2023
The vulnerabilities9
- 7 March 2023CVE-2022-28810ManageEngineZoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
- 23 January 2023CVE-2022-47966ManageEngineZoho ManageEngine Multiple Products Remote Code Execution VulnerabilityRansomware
- 22 September 2022CVE-2022-35405ManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- 10 December 2021CVE-2021-44515Desktop CentralZoho Desktop Central Authentication Bypass Vulnerability
- 1 December 2021CVE-2021-44077ManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusZoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
- 1 December 2021CVE-2021-37415ManageEngine ServiceDesk Plus (SDP)Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
- 3 November 2021CVE-2021-40539ManageEngineZoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityRansomware
- 3 November 2021CVE-2020-10189ManageEngineZoho ManageEngine Desktop Central File Upload Vulnerability
- 3 November 2021CVE-2019-8394ManageEngineZoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Zoho included.