Zohocorp 厂商相关 87 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Zohocorp 主要提供 Zoho Office Suite 等云端办公协作工具,其开源组件亦被广泛集成。截至最新统计,该厂商已收录 35 条 CVE。历史漏洞多集中于身份认证绕过、跨站脚本及越权访问,部分高危漏洞曾导致远程代码执行。其安全架构采用多租户隔离机制,但早期版本因配置疏忽引发过数据泄露风险。建议用户及时更新补丁,并启用双因素认证以强化账户安全,防范潜在的攻击向量。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-15358 | 路径遍历漏洞 — ManageEngine OpManager CWE-428 | 7.5 | High | 2026-09-23 |
| CVE-2026-14913 | SQL注入漏洞 — ManageEngine OpManager CWE-89 | 8.8 | High | 2026-09-23 |
| CVE-2026-12370 | 远程代码执行漏洞 — ManageEngine OpManager CWE-1336 | 7.6 | High | 2026-09-23 |
| CVE-2026-75791 | 身份验证绕过漏洞 — ManageEngine ADSelfService Plus CWE-306 | 8.6 | High | 2026-09-22 |
| CVE-2026-74849 | 远程代码执行漏洞 — ManageEngine ADSelfService Plus CWE-78 | 9.8 | Critical | 2026-09-22 |
| CVE-2026-18912 | ManageEngine DataSecurity Plus 6310前认证SQL注入 — ManageEngine DataSecurity Plus CWE-89 | 7.7 | High | 2026-09-18 |
| CVE-2026-18911 | DataSecurity Plus 6310前代理认证绕过漏洞 — ManageEngine DataSecurity Plus CWE-20 | 7.5 | High | 2026-09-18 |
| CVE-2026-77697 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 6.3 | Medium | 2026-09-07 |
| CVE-2026-85640 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 6.3 | Medium | 2026-09-07 |
| CVE-2026-77699 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 5.0 | Medium | 2026-09-07 |
| CVE-2026-77698 | ZOHO ManageEngine Endpoint Central 权限许可和访问控制问题漏洞 — ManageEngine Endpoint Central CWE-269 | 5.7 | Medium | 2026-09-07 |
| CVE-2026-14828 | ZOHO ManageEngine Password Manager Pro SQL注入漏洞 — ManageEngine Password Manager Pro CWE-89 | 8.8 | High | 2026-09-02 |
| CVE-2026-12263 | zohocorp manageengine password manager pro 加密问题漏洞 — ManageEngine Password Manager Pro CWE-347 | 8.8 | High | 2026-08-13 |
| CVE-2026-11840 | Zohocorp ManageEngine Password Manager Pro SQL注入漏洞 — ManageEngine Password Manager Pro CWE-89 | 8.8 | High | 2026-08-13 |
| CVE-2026-12571 | ZOHO ManageEngine DDI Central 授权问题漏洞 — manageengine_ddi_central CWE-287 | 9.8 | Critical | 2026-08-11 |
| CVE-2026-16053 | ZOHO M365 Manager Plus 路径遍历漏洞 — ManageEngine M365 Manager Plus CWE-23 | 8.5 | High | 2026-08-11 |
| CVE-2026-6516 | ZOHO ManageEngine ADAudit Plus 命令注入漏洞 — ManageEngine ADAudit Plus CWE-78 | 10.0 | Critical | 2026-07-23 |
| CVE-2026-3183 | ZOHO ManageEngine ADSelfService Plus 授权问题漏洞 — ManageEngine ADSelfService Plus CWE-290 | 7.1 | High | 2026-07-21 |
| CVE-2026-3182 | ZOHO Manageengine Endpoint Central 加密问题漏洞 — ManageEngine Endpoint Central CWE-319 | 4.3 | Medium | 2026-07-21 |
| CVE-2026-11374 | zohocorp manageengine_adselfservice_plus 授权问题漏洞 — manageengine_adselfservice_plus CWE-340 | 9.0 | Critical | 2026-06-23 |
| CVE-2026-8174 | WordPress plugin Zohocorp Zoho Mail 安全漏洞 — Zoho Mail wordpress plugin CWE-352 | 5.7 | Medium | 2026-05-26 |
| CVE-2026-2740 | Zoho多款产品 命令注入漏洞 — ManageEngine ADSelfService Plus CWE-77 | 8.4 | High | 2026-05-21 |
| CVE-2026-3324 | ZOHO ManageEngine Log360 安全漏洞 — ManageEngine Log360 CWE-288 | 8.2 | High | 2026-04-16 |
| CVE-2026-5785 | ZOHO ManageEngine Password Manager Pro和ZOHO ManageEngine PAM360 安全漏洞 — ManageEngine PAM360 CWE-89 | 8.1 | High | 2026-04-16 |
| CVE-2026-27655 | ZOHO ManageEngine Exchange Reporter Plus 安全漏洞 — ManageEngine Exchange Reporter Plus CWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-4108 | ZOHO ManageEngine Exchange reporter Plus 安全漏洞 — ManageEngine Exchange Reporter Plus CWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-4107 | ZOHO ManageEngine Exchange reporter Plus 安全漏洞 — ManageEngine Exchange Reporter Plus CWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-3880 | ZOHO ManageEngine Exchange reporter Plus 安全漏洞 — ManageEngine Exchange Reporter Plus CWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-3879 | 多款产品安全漏洞 — ManageEngine Exchange Reporter Plus CWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-28703 | ZOHO ManageEngine Exchange reporter Plus 安全漏洞 — ManageEngine Exchange Reporter Plus CWE-79 | 7.3 | High | 2026-04-03 |
本页汇总了 Zohocorp 厂商截至目前公开的全部 87 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。