Zoho
9 Zoho flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Mar 7, 2023.
9on CISA's list, all time
0added in 2026
0in the last 90 days
2used by ransomware
3zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| ManageEngine | 6 | Mar 7, 2023 |
| Desktop Central | 1 | Dec 10, 2021 |
| ManageEngine ServiceDesk Plus (SDP) | 1 | Dec 1, 2021 |
| ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 1 | Dec 1, 2021 |
Latest Zoho flaws
- ManageEngineZoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
- ManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- ManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- Desktop CentralZoho Desktop Central Authentication Bypass Vulnerability
- ManageEngine ServiceDesk Plus (SDP)Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusZoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
- ManageEngineZoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
- ManageEngineZoho ManageEngine Desktop Central File Upload Vulnerability
- ManageEngineZoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.