Z
Zoho
Security Risk Profile
63
/100
highSecurity Risk Score
Comprehensive risk assessment based on 60 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 23, 2014 to present
60
Total CVEs
38
Critical+High
1
Exploited
32
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
32
Critical/High
Risk Level
63/100
high
⚠️ 1 Active Exploits⚡ 1 Zero-Days🆕 5Fresh (<7d)📈 6 in Last 30 Days
Severity Distribution
Critical
8High
30Medium
20Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
10Age Distribution
Common Weaknesses (CWE)
1
XSS
13
2
SQL Injection
12
3
CSRF
8
4
Malicious File Upload
3
5
Command Injection
2
Most Affected Products
1. Zohocorp ManageEngine ADSelfService Plus183
2. ZohoCorp ManageEngine ADAudit Plus119
3. ZohoCorp ManageEngine ServiceDesk Plus80
4. Zohocorp ManageEngine ServiceDesk Plus36
5. Zohocorp ManageEngine ServiceDesk Plus MSP34
Recent Vulnerabilities
See more →CVE-2026-12573
CVSS 8.8high
Nov 10, 2026🔧 No Patch
CVE-2026-12266
CVSS 7.6high
Authenticated Broken Access Control
Nov 10, 2026🔧 No Patch
CVE-2026-12574
CVSS 8.1high
Server-Side HTML Injection
Nov 10, 2026🔧 No Patch
CVE-2026-12572
CVSS 7.2high
SQL Injection
Nov 10, 2026🔧 No Patch
CVE-2026-95651
CVSS 7.5high
Authentication Bypass
Nov 10, 2026🔧 No Patch
CVE-2026-13594
CVSS 9.1critical
Improper Access Control vulnerability
Nov 3, 2026🔧 No Patch
CVE-2026-12265
CVSS 8.8high
Authenticated Broken Access Control
Sep 28, 2026🔧 No Patch
CVE-2026-12264
CVSS 8.8high
Authenticated Arbitrary File Write
Sep 28, 2026🔧 No Patch
CVE-2026-12269
CVSS 8.8high
Authenticated File Write to RCE via keepalived in DDI Central
Sep 28, 2026🔧 No Patch
CVE-2026-16053
CVSS 8.5high
Path Traversal
Aug 11, 2026🔧 No Patch
Monitor Zoho in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.