Login Request a demo
ZE
Product
Zentao
by Easycorp · last CVE May 23, 2025
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 4High 4Medium 8Low 0
Severity
All severities16Critical4High4Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zentao to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-24216
9.8
1%
Feb 8
Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/module/repo/model.php
Affected: 18.0 through 18.10
CVE-2024-24202
9.8
1%
Feb 8
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary…
Affected: 18.10
CVE-2020-28165
9.8
1%
Aug 12
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability
Affected: before 12.4.2
CVE-2025-5114
9.1
1%
May 23
easysoft zentaopms Editor index.php edit deserialization
Affected: 21.5_2025-03-07
Showing 4