CC
Product
Client Connector
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 29Medium 12Low 0
Watch
Add Client Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28806 | 6.5 | Aug 6 | An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering Affected: before 4.2.0.190 |
| CVE-2023-28794 | 6.5 | Nov 6 | Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse Affected: before 1.3.1.6 |
| CVE-2023-28803 | 6.5 | Oct 23 | An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass Affected: before 3.9 |
| CVE-2023-28800 | 6.1 | Jun 22 | When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login Affected: before 1.4; before 1.9.3; before 1.10.1; before 1.10.2; before 3.7; before 3.9 |
| CVE-2023-28799 | 6.1 | Jun 22 | A URL parameter during login flow was vulnerable to injection Affected: before 1.4; before 1.9.3; before 1.10.1; before 1.10.2; before 3.7; before 3.9 |
| CVE-2024-23461 | 5.5 | May 2 | An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue… Affected: before 3.4 |
| CVE-2021-26734 | 5.5 | Oct 23 | Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation Affected: before 3.4.0.124 |
| CVE-2023-28802 | 5.4 | Nov 21 | An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from… Affected: before 4.2.0.149 |
| CVE-2026-22569 | 5.3 | Mar 31 | Incorrect startup configuration in ZCC Affected: 4.7 before 4.7.0.141; 4.8 before 4.8.0.63 |
| CVE-2023-28804 | 5.3 | Oct 23 | An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before… Affected: before 1.4.0.105 |
| CVE-2024-23464 | 4.9 | Aug 6 | In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights Affected: before 4.2.1 |
| CVE-2021-26737 | 4.7 | Oct 23 | The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients Affected: before 3.6 |
Showing 12