ZE
Product
Zentao
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 8Low 0
Watch
Add Zentao to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49394 | 6.1 | Jan 10 | Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly Affected: through 4.1.3 |
| CVE-2023-6439 | 6.1 | Nov 30 | A vulnerability classified as problematic was found in ZenTao PMS 18.8 Affected: 18.8 |
| CVE-2020-21268 | 6.1 | Jun 20 | Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter Affected: 11.6.4 |
| CVE-2020-22533 | 6.1 | Apr 4 | Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter Affected: All versions, or not specified |
| CVE-2021-27558 | 6.1 | Aug 31 | A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such as data-link-creator Affected: 12.5.3 |
| CVE-2023-46475 | 5.4 | Nov 2 | A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious… Affected: 18.3 |
| CVE-2023-44826 | 5.4 | Oct 10 | Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script Affected: 18.6 |
| CVE-2021-27557 | 4.3 | Aug 31 | A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a Cron job Affected: 12.5.3 |
Showing 8