Security Resilience

← All vendors

Zohocorp

CPE vendor key: zohocorp · 55 CVEs published in the last 24 months.

CVEs (365 d)
27
no change vs prior 30d
Avg CVSS (365 d)
6.77
over 27 CVEs
Avg EPSS pct (365 d)
0.56
higher = more likely exploited
KEV hit rate (365 d)
0.0%
0 of 27 added to CISA KEV
LLM-credited CVEs
0
none detected

Monthly CVE volume — last 24 months

20242025202609
Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

CritHighMedLow
Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

manageengine_exchange_reporter_plus
19
manageengine_adaudit_plus
11
manageengine_endpoint_central
6
manageengine_admanager_plus
5
manageengine_applications_manager
4
manageengine_adselfservice_plus
3
manageengine_analytics_plus
2
manageengine_servicedesk_plus_msp
2
manageengine_sharepoint_manager_plus
1
manageengine_supportcentre_plus
1
Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

CWE-79
19
CWE-89
15
CWE-269
4
CWE-200
3
CWE-434
2
CWE-611
1
CWE-863
1
CWE-639
1
CWE-287
1
CWE-91
1
Distinct CVEs assigned each weakness.

Known exploited, all time (9)

PublishedCVE
2023-01-18CVE-2022-47966
2022-07-19CVE-2022-35405
2022-04-18CVE-2022-28810
2021-12-12CVE-2021-44515
2021-11-29CVE-2021-44077
2021-09-07CVE-2021-40539
2021-09-01CVE-2021-37415
2020-03-06CVE-2020-10189
2019-02-17CVE-2019-8394
Attributed by CPE rather than by CISA's vendor name, so it includes CVEs filed under another vendor whose affected-product list names this one — shared library code is the usual reason. Broader, and noisier, than the name-matched card above on purpose.

Generated 16 October 2026 14:24 UTC .