Browse CVEs

MEDIUM 6.5 CVE-2023-28803 An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functiona… Client Connector 3.9+ Fix from $1,6002023-10-23 MEDIUM 5.3 CVE-2023-28804 An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects L… Client Connector 1.4.0.105+ Fix from $1,6002023-10-23 MEDIUM 5.5 CVE-2021-26734 Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversar… Client Connector 3.4.0.124+ Fix from $1,6002023-10-23 MEDIUM 5.5 CVE-2023-41717 Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. Zscaler Proxy after 3.6.1.25 Fix from $1,6002023-08-31 CRITICAL 9.8 CVE-2023-28801 An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affec… Zscaler Internet Access Admin Portal 6.2r+ Fix from $2,3002023-08-31 MEDIUM 6.1 CVE-2023-28799 A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect th… Client Connector 1.4 / 1.9.3+ Fix from $1,6002023-06-22 MEDIUM 6.1 CVE-2023-28800 When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login. Client Connector 1.4 / 1.9.3+ Fix from $1,6002023-06-22 HIGH 7.8 CVE-2020-11632 The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with syste… Client Connector 2.1.2.150+ Fix from $1,9502021-07-15 HIGH 7.8 CVE-2020-11634 The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adv… Client Connector 2.1.2.105+ Fix from $1,9502021-07-15 CRITICAL 9.8 CVE-2020-11633 The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversa… Client Connector 2.1.2.81+ Fix from $2,3002021-07-15 HIGH 7.8 CVE-2020-11635 The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system pri… Client Connector 3.1.0+ Fix from $1,9502021-02-16