EA
Vendor
Easycorp
24
CVEs
0
On KEV
0
New 30D
Products
ZE9.8
Zentao
Easycorp
16 CVEs0 on KEV0 new
EA8.1
EasyAdminBundle
EasyCorp
2 CVEs0 on KEV0 new
ZB9.8
Zentao Biz
Easycorp
2 CVEs0 on KEV0 new
ZM9.8
Zentao Max
Easycorp
2 CVEs0 on KEV0 new
EA5.4
Easyadmin
Easycorp
1 CVEs0 on KEV0 new
ZP8.8
Zentao Pro
Easycorp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54087 | EA EasyAdminBundle EasyCorp | 7.6 | Sep 14 | EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField |
| CVE-2026-81892 | EA EasyAdminBundle EasyCorp | 8.1 | Aug 31 | EasyAdmin custom-action dispatcher bypasses access_control on other routes |
| CVE-2025-5114 | ZE Zentao Easycorp | 9.1 | May 23 | easysoft zentaopms Editor index.php edit deserialization |
| CVE-2024-3081 | EA Easyadmin Easycorp | 5.4 | Mar 29 | A vulnerability was found in EasyCorp EasyAdmin up to 4.8.9 |
| CVE-2024-24216 | ZE Zentao Easycorp | 9.8 | Feb 8 | Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/module/repo/model.php |
| CVE-2024-24202 | ZM Zentao Max Easycorp | 9.8 | Feb 8 | An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary… |
| CVE-2023-49394 | ZE Zentao Easycorp | 6.1 | Jan 10 | Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly |
| CVE-2023-6439 | ZE Zentao Easycorp | 6.1 | Nov 30 | A vulnerability classified as problematic was found in ZenTao PMS 18.8 |
| CVE-2023-46475 | ZE Zentao Easycorp | 5.4 | Nov 2 | A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious… |
| CVE-2023-44827 | ZM Zentao Max Easycorp | 8.8 | Oct 10 | An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script… |
| CVE-2023-44826 | ZE Zentao Easycorp | 5.4 | Oct 10 | Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script |
| CVE-2020-21268 | ZE Zentao Easycorp | 6.1 | Jun 20 | Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter |
| CVE-2020-22533 | ZE Zentao Easycorp | 6.1 | Apr 4 | Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter |
| CVE-2022-47745 | ZE Zentao Easycorp | 8.8 | Jan 19 | ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection |
| CVE-2022-37700 | ZE Zentao Easycorp | 7.5 | Sep 19 | Zentao Demo15 is vulnerable to Directory Traversal |
| CVE-2021-27558 | ZE Zentao Easycorp | 6.1 | Aug 31 | A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such as data-link-creator |
| CVE-2021-27557 | ZE Zentao Easycorp | 4.3 | Aug 31 | A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a Cron job |
| CVE-2021-27556 | ZE Zentao Easycorp | 7.2 | Aug 31 | The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parameter to System |
| CVE-2020-28165 | ZE Zentao Easycorp | 9.8 | Aug 12 | The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability |
| CVE-2020-7361 | ZP Zentao Pro Easycorp | 8.8 | Aug 6 | The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component |