Zscaler vulnerabilities
53 CVEs and advisories name Zscaler as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-23463Anti-Tampering bypass via Repair App functionality
- CVE-2024-23482ZScalerService Local Privilege Escalation
- CVE-2023-41973Lack of input santization on Zscaler Client Connector enables arbitrary code execution
- CVE-2023-41972Revert password check incorrect type validation
- CVE-2023-41969ZSATrayManager Arbitrary File Deletion
- CVE-2023-28807Bypass of ZIA domain fronting detection module through evasion technique
- CVE-2023-28802Disable Zscaler using machine tunnel restart
- CVE-2023-28794PAC Files Exposed to Internet Websites
- CVE-2023-28805ZCC on Linux privilege escalation
- CVE-2023-28804Linux ZCC allows unsigned updates, allowing elevated Code Execution
- CVE-2023-28803Traffic being bypassed by ZCC by configuring synthetic IP range as local network
- CVE-2023-28797LPE using arbitrary file delete with Symlinks
- CVE-2023-28796IPC Bypass Through PLT Section in ELF
- CVE-2023-28795Client IPC validation bypass
- CVE-2023-28793Heap Based Buffer Overflow in Library
- CVE-2021-26738Privilege Escalation for ZCC macOS via PATH Variable
- CVE-2021-26737Privilege Escalation Using PID Reuse in ZCC macOS
- CVE-2021-26736ZApp Installer Privilege Escalation Vulnerabilities
- CVE-2021-26735Untrusted Search Path While Executing REG DELETE by Uninstaller
- CVE-2021-26734Junction Delete leading to elevation of privilege
- CVE-2023-28801Improper SAML signature verification
- CVE-2023-28800Output encoding missing in redrurl parameter
- CVE-2023-28799A URL parameter during login flow was vulnerable to injection.