Zscaler

zscaler

46 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Client Connector

client_connector

41 CVEs

Zscaler Internet Access Admin Portal

zscaler_internet_access_admin_portal

Secure Internet And Saas Access

secure_internet_and_saas_access

1 CVE

CVEs (46)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-22569 1Zscaler 1Client Connector Apr 6, 2026 Mar 31, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.
CVE-2026-22568 1Zscaler 1Zscaler Internet Access Admin Portal Feb 26, 2026 Feb 23, 2026 N/A· v4 2.7 LOW· v3 N/A· v2 Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.
CVE-2026-22567 1Zscaler 1Zscaler Internet Access Admin Portal Feb 26, 2026 Feb 23, 2026 N/A· v4 2.7 LOW· v3 N/A· v2 Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.
CVE-2024-23483 1Zscaler 1Client Connector Aug 7, 2024 Aug 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.
CVE-2024-23464 1Zscaler 1Client Connector Aug 7, 2024 Aug 6, 2024 N/A· v4 4.9 MEDIUM· v3 N/A· v2 In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1
CVE-2024-23460 1Zscaler 1Client Connector Aug 7, 2024 Aug 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS <4.2.
CVE-2024-23458 1Zscaler 1Client Connector Aug 7, 2024 Aug 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on...Show more While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.Show less
CVE-2024-23456 1Zscaler 1Client Connector Aug 7, 2024 Aug 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connector <4.2.0.190 with anti-tampering enabled.
CVE-2023-28806 1Zscaler 1Client Connector Aug 7, 2024 Aug 6, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.
CVE-2024-3661 7Cisco CitrixF5+4 more 9Anyconnect Vpn Client Big Ip Access Policy ManagerClient Connector+6 more Jan 15, 2025 May 6, 2024 N/A· v4 7.6 HIGH· v3 N/A· v2 DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface....Show more DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.Show less
CVE-2024-23462 1Zscaler 1Client Connector Feb 17, 2026 May 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Clien...Show more An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4. Show less
CVE-2024-23461 1Zscaler 1Client Connector Feb 17, 2026 May 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4....Show more An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4. Show less
CVE-2024-23459 1Zscaler 1Client Connector Feb 17, 2026 May 2, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.
CVE-2023-41971 1Zscaler 1Client Connector Mar 2, 2026 May 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.
CVE-2023-41970 1Zscaler 1Client Connector Feb 19, 2026 May 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: b...Show more An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62. Show less
CVE-2023-28798 1Zscaler 1Client Connector Feb 20, 2026 May 2, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.
CVE-2024-23480 1Zscaler 1Client Connector Feb 17, 2026 May 1, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.
CVE-2024-23457 1Zscaler 1Client Connector Mar 2, 2026 May 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209
CVE-2024-23463 1Zscaler 1Client Connector Mar 2, 2026 Apr 30, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zscaler Client Connector on Windows prior to 4.2.1
CVE-2024-23482 1Zscaler 1Client Connector Oct 10, 2025 Mar 26, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later.

12 3 Next