CC
Product
Client Connector
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 30Medium 12Low 0
Watch
Add Client Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28806 | 6.5 | Aug 6 | Signature validation error in DLL allows disabling anti-tampering protection Affected: before 4.2.0.190 |
| CVE-2023-28794 | 6.5 | Nov 6 | PAC Files Exposed to Internet Websites Affected: before 1.3.1.6 |
| CVE-2023-28803 | 6.5 | Oct 23 | Traffic being bypassed by ZCC by configuring synthetic IP range as local network Affected: before 3.9 |
| CVE-2023-28800 | 6.1 | Jun 22 | Output encoding missing in redrurl parameter Affected: before 3.9 Mac, 3.7 Win, 1.9.3 iOS, 1.10.2 Android, 1.10.1 Chrome OS, 1.4 Linux |
| CVE-2023-28799 | 6.1 | Jun 22 | A URL parameter during login flow was vulnerable to injection Affected: before 3.9 Mac, 3.7 Win, 1.9.3 iOS, 1.10.2 Android, 1.10.1 Chrome OS, 1.4 Linux |
| CVE-2024-23461 | 5.5 | May 2 | ZCC macOS Upgrade ZIP Bomb DoS Affected: before 3.4 |
| CVE-2021-26734 | 5.5 | Oct 23 | Junction Delete leading to elevation of privilege Affected: before 3.4.0.124 |
| CVE-2023-28802 | 5.4 | Nov 21 | Disable Zscaler using machine tunnel restart Affected: before 4.2.0.149 |
| CVE-2026-22569 | 5.3 | Mar 31 | Incorrect startup configuration in ZCC Affected: 4.7 before 4.7.0.141; 4.8 before 4.8.0.63 |
| CVE-2023-28804 | 5.3 | Oct 23 | Linux ZCC allows unsigned updates, allowing elevated Code Execution Affected: before 1.4.0.105 |
| CVE-2024-23464 | 4.9 | Aug 6 | Zscaler bypass with administrative privileges on Windows Affected: before 4.2.1 |
| CVE-2021-26737 | 4.7 | Oct 23 | Privilege Escalation Using PID Reuse in ZCC macOS Affected: before 3.6 |
Showing 12