Zscaler Client Connector
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
unpatched
by severity
5critical18high12medium0low
updated 2026-10-27
01
vulnerabilities (38)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-23483US | critical9.8 | — |
| CVE-2023-28800US | medium6.1 | — |
| CVE-2024-23459US | critical9.8 | — |
| CVE-2023-28799US | medium6.1 | — |
| CVE-2023-28798US | critical9.8 | — |
| CVE-2024-23464US | medium4.9 | — |
| CVE-2023-28805US | critical9.8 | — |
| CVE-2024-23463US | high8.1 | — |
| CVE-2023-41973US | high7.8 | — |
| CVE-2023-28793US | high7.8 | — |
| CVE-2023-41969US | high7.1 | — |
| CVE-2024-23480US | critical9.8 | — |
| CVE-2023-28803US | medium6.5 | — |
| CVE-2023-28804US | medium5.3 | — |
| CVE-2024-23482US | high7.8 | — |
| CVE-2023-41972US | high7.8 | — |
| CVE-2021-26738US | high7.8 | — |
| CVE-2023-28802US | medium5.4 | — |
| CVE-2024-23456US | high7.5 | — |
| CVE-2023-28797US | high7.3 | — |
| CVE-2021-26736US | high7.8 | — |
| CVE-2024-23457US | — | — |
| CVE-2023-28794US | medium6.5 | — |
| CVE-2024-23462US | high7.5 | — |
| CVE-2023-28806US | medium6.5 | — |
| CVE-2023-41971US | high7.8 | — |
| CVE-2023-28796US | high7.8 | — |
| CVE-2026-22569US | medium5.3 | — |
| CVE-2021-26734US | medium5.5 | — |
| CVE-2023-28795US | high7.8 | — |
| CVE-2021-26735US | high7.8 | — |
| CVE-2025-54983US | — | — |
| CVE-2024-23460US | high7.8 | — |
| CVE-2024-23458US | high7.8 | — |
| CVE-2021-26737US | medium4.7 | — |
| CVE-2023-41970US | high7.8 | — |
| CVE-2024-23461US | medium5.5 | — |
| CVE-2024-31127US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-346Origin Validation Error6 CVEs
- CWE-347Improper Verification of Cryptographic Signature6 CVEs
- CWE-354Improper Validation of Integrity Check Value4 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
- CWE-269Improper Privilege Management2 CVEs
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
03
sources (2)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)36 CVEs
- DECERT-Bund (BSI CSAF)8 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan