Zohocorp 厂商相关 71 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Zohocorp 主要提供 Zoho Office Suite 等云端办公协作工具,其开源组件亦被广泛集成。截至最新统计,该厂商已收录 35 条 CVE。历史漏洞多集中于身份认证绕过、跨站脚本及越权访问,部分高危漏洞曾导致远程代码执行。其安全架构采用多租户隔离机制,但早期版本因配置疏忽引发过数据泄露风险。建议用户及时更新补丁,并启用双因素认证以强化账户安全,防范潜在的攻击向量。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-86678 | 认证缺陷漏洞 — ManageEngine Applications Manager CWE-639 | 8.8 | High | 2026-09-23 |
| CVE-2026-86677 | 身份认证失效漏洞 — ManageEngine Applications Manager CWE-89 | 8.8 | High | 2026-09-23 |
| CVE-2026-86679 | 访问控制失效漏洞 — ManageEngine Applications Manager CWE-20 | 7.1 | High | 2026-09-23 |
| CVE-2026-86683 | 认证失效漏洞 — ManageEngine Applications Manager CWE-20 | 8.1 | High | 2026-09-23 |
| CVE-2026-86681 | 访问控制失效漏洞 — ManageEngine Applications Manager CWE-306 | 7.6 | High | 2026-09-23 |
| CVE-2026-86708 | 敏感数据泄露漏洞 — ManageEngine Applications Manager CWE-321 | 10.0 | Critical | 2026-09-23 |
| CVE-2026-19599 | 远程代码执行漏洞 — ManageEngine OpManager CWE-78 | 9.9 | Critical | 2026-09-23 |
| CVE-2026-75825 | 认证绕过漏洞 — ManageEngine OpManager CWE-306 | 8.8 | High | 2026-09-23 |
| CVE-2026-76978 | 命令注入漏洞 — ManageEngine OpManager CWE-78 | 8.8 | High | 2026-09-23 |
| CVE-2026-76979 | XML 注入漏洞 — ManageEngine OpManager CWE-91 | 7.7 | High | 2026-09-23 |
| CVE-2026-76980 | 数据暴露漏洞 — ManageEngine OpManager CWE-20 | 7.4 | High | 2026-09-23 |
| CVE-2026-84787 | 权限提升漏洞 — ManageEngine OpManager CWE-250 | 8.1 | High | 2026-09-23 |
| CVE-2026-84789 | 访问控制失效漏洞 — ManageEngine OpManager CWE-639 | 7.1 | High | 2026-09-23 |
| CVE-2026-84791 | 访问控制缺陷漏洞 — ManageEngine OpManager CWE-639 | 7.1 | High | 2026-09-23 |
| CVE-2026-15358 | 路径遍历漏洞 — ManageEngine OpManager CWE-428 | 7.5 | High | 2026-09-23 |
| CVE-2026-14913 | SQL注入漏洞 — ManageEngine OpManager CWE-89 | 8.8 | High | 2026-09-23 |
| CVE-2026-12370 | 远程代码执行漏洞 — ManageEngine OpManager CWE-1336 | 7.6 | High | 2026-09-23 |
| CVE-2026-75791 | Authentication bypass vulnerability — ManageEngine ADSelfService Plus CWE-306 | 8.6 | High | 2026-09-22 |
| CVE-2026-74849 | Remote code execution vulnerability — ManageEngine ADSelfService Plus CWE-78 | 9.8 | Critical | 2026-09-22 |
| CVE-2026-18912 | ManageEngine DataSecurity Plus 6310前认证SQL注入 — ManageEngine DataSecurity Plus CWE-89 | 7.7 | High | 2026-09-18 |
| CVE-2026-18911 | DataSecurity Plus 6310前代理认证绕过漏洞 — ManageEngine DataSecurity Plus CWE-20 | 7.5 | High | 2026-09-18 |
| CVE-2026-77697 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 6.3 | Medium | 2026-09-07 |
| CVE-2026-85640 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 6.3 | Medium | 2026-09-07 |
| CVE-2026-77699 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 5.0 | Medium | 2026-09-07 |
| CVE-2026-77698 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 5.7 | Medium | 2026-09-07 |
| CVE-2026-14828 | ZOHO ManageEngine Password Manager Pro SQL注入漏洞 — ManageEngine Password Manager Pro CWE-89 | 8.8 | High | 2026-09-02 |
| CVE-2026-12263 | zohocorp manageengine password manager pro 加密问题漏洞 — ManageEngine Password Manager Pro CWE-347 | 8.8 | High | 2026-08-13 |
| CVE-2026-11840 | Zohocorp ManageEngine Password Manager Pro SQL注入漏洞 — ManageEngine Password Manager Pro CWE-89 | 8.8 | High | 2026-08-13 |
| CVE-2026-12571 | ZOHO ManageEngine DDI Central 授权问题漏洞 — manageengine_ddi_central CWE-287 | 9.8 | Critical | 2026-08-11 |
| CVE-2026-16053 | ZOHO M365 Manager Plus 路径遍历漏洞 — ManageEngine M365 Manager Plus CWE-23 | 8.5 | High | 2026-08-11 |
本页汇总了 Zohocorp 厂商截至目前公开的全部 71 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。