ZE
Product
Zentao
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 8Low 0
Watch
Add Zentao to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44827 | 8.8 | Oct 10 | An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script… Affected: through 18.6 |
| CVE-2022-47745 | 8.8 | Jan 19 | ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection Affected: 16.4 before 18.0; 18.0 |
| CVE-2022-37700 | 7.5 | Sep 19 | Zentao Demo15 is vulnerable to Directory Traversal Affected: 15.0 |
| CVE-2021-27556 | 7.2 | Aug 31 | The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parameter to System Affected: 12.5.3 |
Showing 4
