PT-2025-39230 · Undefined · Undefined

CVE-2023-46578

Publicado

2025-09-23

Atualizado

2025-09-23

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.

Yes, Zoho has faced several security issues:

2021: ManageEngine ADSelfService Plus vulnerability (CVE-2021-40539) exploited by APT27, affecting 9+ organizations and 11,000+ servers with Godzilla Webshell malware. Patched by Zoho.
2022: Critical RCE flaw in ManageEngine led to BankingLab breach, exposing fintech client data (e.g., SQL dumps, keys). Patched in June 2022.
2023-2024: Vulnerabilities like CVE-2023-46578 (RCE), CVE-2024-19234 (Zoho Vault encryption bypass), and API misconfigs in CRM.

Zoho typically responds with patches and tools. No major breaches listed on Wikipedia.

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-46578

Undefined