Zscaler kayıtları

zscaler üreticisine ait 46 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 5
Düzeltme kaydı olan: %2,2
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

46 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2020-11633İstismar yok	The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers.zscaler · client connector · CWE-787 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,9	15 Tem 2021
39İzleyin	CVE-2024-23483İstismar yok	Local Privilege Escalation via lack of input validationzscaler · client connector · CWE-20 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%0,7	6 Ağu 2024
39İzleyin	CVE-2024-23459İstismar yok	Multiple Arbitrary Creates/Overwrites by link followingzscaler · client connector · CWE-59 Kimlik doğrulamasız	Kritik9,8	—	%0,5	2 May 2024
39İzleyin	CVE-2023-28798İstismar yok	Out-of-bounds write to heap in pacparserzscaler · client connector · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%0,4	2 May 2024
39İzleyin	CVE-2023-28801İstismar yok	Improper SAML signature verificationzscaler · zscaler internet access admin portal · CWE-347 Kimlik doğrulamasız Zayıf kripto	Kritik9,8	—	%0,4	31 Ağu 2023
39İzleyin	CVE-2023-28805İstismar yok	ZCC on Linux privilege escalationzscaler · client connector · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%0,3	23 Eki 2023
39İzleyin	CVE-2024-23480İstismar yok	Insecure MacOS code sign check fallbackzscaler · client connector · CWE-347 pre-auth RCE Zayıf kripto	Kritik9,8	—	%0,3	1 May 2024
32İzleyin	CVE-2024-23463İstismar yok	Anti-Tampering bypass via Repair App functionalityzscaler · client connector · CWE-367 Kimlik doğrulamasız Yarış durumu	Yüksek8,1	—	%0,4	30 Nis 2024
31İzleyin	CVE-2024-3661Kavram kanıtı	DHCP routing options can manipulate interface-based VPN trafficfortinet · forticlient · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,6	—	%4,1	6 May 2024
31İzleyin	CVE-2020-11634İstismar yok	The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL.zscaler · client connector · CWE-427 RCE	Yüksek7,8	—	%0,5	15 Tem 2021
31İzleyin	CVE-2020-11635İstismar yok	The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with szscaler · client connector Yerel yetki yükseltme	Yüksek7,8	—	%0,4	16 Şub 2021
31İzleyin	CVE-2020-11632İstismar yok	The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code wzscaler · client connector · CWE-428 Yerel yetki yükseltme	Yüksek7,8	—	%0,3	15 Tem 2021
31İzleyin	CVE-2023-41973İstismar yok	Lack of input santization on Zscaler Client Connector enables arbitrary code executionzscaler · client connector · CWE-22 RCE Yol geçişi	Yüksek7,8	—	%0,3	26 Mar 2024
31İzleyin	CVE-2023-28793İstismar yok	Heap Based Buffer Overflow in Libraryzscaler · client connector · CWE-94 RCE	Yüksek7,8	—	%0,3	23 Eki 2023
31İzleyin	CVE-2024-23482İstismar yok	ZScalerService Local Privilege Escalationzscaler · client connector · CWE-20 Yerel yetki yükseltme	Yüksek7,8	—	%0,3	26 Mar 2024
31İzleyin	CVE-2023-41972İstismar yok	Revert password check incorrect type validationzscaler · client connector · CWE-280	Yüksek7,8	—	%0,2	26 Mar 2024
31İzleyin	CVE-2021-26738İstismar yok	Privilege Escalation for ZCC macOS via PATH Variablezscaler · client connector · CWE-426 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	23 Eki 2023
31İzleyin	CVE-2021-26736İstismar yok	ZApp Installer Privilege Escalation Vulnerabilitieszscaler · client connector · CWE-20 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	23 Eki 2023
31İzleyin	CVE-2024-23457İstismar yok	Anti-tampering can be disabled with uninstall password enforcedzscaler · client connector · CWE-269 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	1 May 2024
31İzleyin	CVE-2023-41971İstismar yok	Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Controlzscaler · client connector · CWE-59 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	2 May 2024
31İzleyin	CVE-2023-28796İstismar yok	IPC Bypass Through PLT Section in ELFzscaler · client connector · CWE-94 RCE	Yüksek7,8	—	%0,2	23 Eki 2023
31İzleyin	CVE-2023-28795İstismar yok	Client IPC validation bypasszscaler · client connector · CWE-346	Yüksek7,8	—	%0,1	23 Eki 2023
31İzleyin	CVE-2021-26735İstismar yok	Untrusted Search Path While Executing REG DELETE by Uninstallerzscaler · client connector · CWE-346 Yerel yetki yükseltme	Yüksek7,8	—	%0,1	23 Eki 2023
31İzleyin	CVE-2024-23460İstismar yok	Incorrect signature validation of packagezscaler · client connector · CWE-347 RCE Zayıf kripto	Yüksek7,8	—	%0,1	6 Ağu 2024
31İzleyin	CVE-2024-23458İstismar yok	Local Privilege Escalation on Zscaler Client Connector on Windowszscaler · client connector · CWE-346 Yerel yetki yükseltme	Yüksek7,8	—	%0,1	6 Ağu 2024

CVE-2020-11633
40Planlayın
The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Bellek hatası
zscaler · client connector15 Tem 2021
CVE-2024-23483
39İzleyin
Local Privilege Escalation via lack of input validation
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
zscaler · client connector6 Ağu 2024
CVE-2024-23459
39İzleyin
Multiple Arbitrary Creates/Overwrites by link following
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
zscaler · client connector2 May 2024
CVE-2023-28798
39İzleyin
Out-of-bounds write to heap in pacparser
KritikCVSS 9,8İstismar yokEPSS %0
- pre-auth RCE
- Bellek hatası
zscaler · client connector2 May 2024
CVE-2023-28801
39İzleyin
Improper SAML signature verification
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
zscaler · zscaler internet access admin portal31 Ağu 2023
CVE-2023-28805
39İzleyin
ZCC on Linux privilege escalation
KritikCVSS 9,8İstismar yokEPSS %0
- pre-auth RCE
- Komut enjeksiyonu
zscaler · client connector23 Eki 2023
CVE-2024-23480
39İzleyin
Insecure MacOS code sign check fallback
KritikCVSS 9,8İstismar yokEPSS %0
- pre-auth RCE
- Zayıf kripto
zscaler · client connector1 May 2024
CVE-2024-23463
32İzleyin
Anti-Tampering bypass via Repair App functionality
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yarış durumu
zscaler · client connector30 Nis 2024
CVE-2024-3661
31İzleyin
DHCP routing options can manipulate interface-based VPN traffic
YüksekCVSS 7,6Kavram kanıtıEPSS %4
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
fortinet · forticlient6 May 2024
CVE-2020-11634
31İzleyin
The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL.
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
zscaler · client connector15 Tem 2021
CVE-2020-11635
31İzleyin
The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with s
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector16 Şub 2021
CVE-2020-11632
31İzleyin
The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code w
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector15 Tem 2021
CVE-2023-41973
31İzleyin
Lack of input santization on Zscaler Client Connector enables arbitrary code execution
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Yol geçişi
zscaler · client connector26 Mar 2024
CVE-2023-28793
31İzleyin
Heap Based Buffer Overflow in Library
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
zscaler · client connector23 Eki 2023
CVE-2024-23482
31İzleyin
ZScalerService Local Privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector26 Mar 2024
CVE-2023-41972
31İzleyin
Revert password check incorrect type validation
YüksekCVSS 7,8İstismar yokEPSS %0
zscaler · client connector26 Mar 2024
CVE-2021-26738
31İzleyin
Privilege Escalation for ZCC macOS via PATH Variable
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector23 Eki 2023
CVE-2021-26736
31İzleyin
ZApp Installer Privilege Escalation Vulnerabilities
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector23 Eki 2023
CVE-2024-23457
31İzleyin
Anti-tampering can be disabled with uninstall password enforced
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector1 May 2024
CVE-2023-41971
31İzleyin
Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector2 May 2024
CVE-2023-28796
31İzleyin
IPC Bypass Through PLT Section in ELF
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
zscaler · client connector23 Eki 2023
CVE-2023-28795
31İzleyin
Client IPC validation bypass
YüksekCVSS 7,8İstismar yokEPSS %0
zscaler · client connector23 Eki 2023
CVE-2021-26735
31İzleyin
Untrusted Search Path While Executing REG DELETE by Uninstaller
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector23 Eki 2023
CVE-2024-23460
31İzleyin
Incorrect signature validation of package
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Zayıf kripto
zscaler · client connector6 Ağu 2024
CVE-2024-23458
31İzleyin
Local Privilege Escalation on Zscaler Client Connector on Windows
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
zscaler · client connector6 Ağu 2024