Advisories · Technology
easysoft zentaopms.
Every CVE that names easysoft zentaopms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc
- easysoft zentaopms
- Broken access control
- CVSS 7.1 High
ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods
- easysoft zentaopms
- Broken access control
- CVSS 5.3 Medium
ZenTao PMS through 22.6 Authorization Bypass via action::editComment
- easysoft zentaopms
- Broken access control
- CVSS 5.3 Medium
easysoft zentaopms Editor index.php edit deserialization
- easysoft zentaopms
- Insecure deserialization
- CWE-20