Browse all 35 CVE security advisories affecting Zohocorp. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Zohocorp primarily develops and distributes web application servers, most notably the Zimbra Collaboration Suite, which facilitates enterprise email and document management. Security audits have identified thirty-five Common Vulnerabilities and Exposures (CVEs) associated with its software ecosystem. Historically, these flaws predominantly involve remote code execution and cross-site scripting, allowing attackers to bypass authentication or inject malicious scripts into web interfaces. Privilege escalation vulnerabilities have also been documented, enabling unauthorized users to gain administrative control over compromised systems. While no single catastrophic incident defines the company’s entire history, the recurring nature of these critical flaws highlights persistent challenges in input validation and access control within its legacy codebase. The accumulation of these CVEs underscores the necessity for rigorous patch management and continuous security monitoring for organizations relying on Zohocorp’s infrastructure, as unaddressed vulnerabilities remain a significant risk vector for data breaches and system compromise.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-3324 | Authentication Bypass — ManageEngine Log360CWE-288 | 8.2 | High | 2026-04-16 |
| CVE-2026-5785 | SQL Injection — ManageEngine PAM360CWE-89 | 8.1 | High | 2026-04-16 |
| CVE-2026-27655 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-4108 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-4107 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-3880 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-3879 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-28703 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-28756 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-28754 | Stored XSS Vulnerability — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2026-04-03 |
| CVE-2026-1367 | SQL Injection — ManageEngine ADSelfService PlusCWE-89 | 8.3 | High | 2026-02-23 |
| CVE-2025-9226 | Stored XSS — ManageEngine OpManagerCWE-79 | 4.6 | Medium | 2026-01-30 |
| CVE-2025-11669 | Broken Access Control — ManageEngine PAM360CWE-862 | 8.1 | High | 2026-01-13 |
| CVE-2025-11250 | Authentication Bypass — ManageEngine ADSelfService PlusCWE-290 | 9.1 | Critical | 2026-01-13 |
| CVE-2025-9435 | Path Traversal — ManageEngine ADManager PlusCWE-22 | 5.5 | Medium | 2026-01-13 |
| CVE-2025-9787 | Stored XSS — ManageEngine Applications ManagerCWE-79 | 6.1 | Medium | 2025-12-18 |
| CVE-2025-11670 | NTLM Hash Exposure Vulnerability — ManageEngine ADManager PlusCWE-200 | 6.4 | Medium | 2025-12-15 |
| CVE-2025-9227 | Stored XSS — ManageEngine OpManagerCWE-79 | 6.5 | Medium | 2025-11-11 |
| CVE-2025-9223 | Command Injection — ManageEngine Applications ManagerCWE-77 | 8.8 | High | 2025-11-11 |
| CVE-2025-8324 | SQL Injection — ManageEngine Analytics PlusCWE-89 | 9.8 | Critical | 2025-11-11 |
| CVE-2025-7633 | Stored XSS — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2025-11-11 |
| CVE-2025-7632 | Stored XSS — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2025-11-11 |
| CVE-2025-7430 | Stored XSS — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2025-11-11 |
| CVE-2025-7429 | Stored XSS — ManageEngine Exchange Reporter PlusCWE-79 | 7.3 | High | 2025-11-11 |
| CVE-2025-5347 | Stored XSS — ManageEngine Exchange Reporter PlusCWE-79 | 6.3 | Medium | 2025-10-30 |
| CVE-2025-5343 | Stored XSS — ManageEngine Exchange Reporter PlusCWE-79 | 6.3 | Medium | 2025-10-30 |
| CVE-2025-5342 | Denial of Service (DoS) — ManageEngine Exchange Reporter PlusCWE-400 | 4.3 | Medium | 2025-10-30 |
| CVE-2025-11248 | Sensitive Information Logged — ManageEngine Endpoint CentralCWE-532 | 3.2 | Low | 2025-10-27 |
| CVE-2025-6239 | Information disclosure — ManageEngine Applications ManagerCWE-200 | 6.5 | Medium | 2025-10-21 |
| CVE-2025-10020 | Command Injection — ManageEngine ADManager PlusCWE-77 | 8.5 | High | 2025-10-21 |
This page lists every published CVE security advisory associated with Zohocorp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.