boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Zoho

Vendor reference — Zoho · sector: Enterprise Applications. Cumulative disclosure record across the archive.

Follow Zoho — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs80
KEV entries80
Rate & severity
KEV/100Med CVSSMed EPSSCHML
100.0—.99390000

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ██▁▁▁▁▁▁▁▁▃▁▁▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2020-10189—100.0—YES2021-11-03
CVE-2022-35405—100.0—YES2022-09-22
CVE-2021-44515—100.0—YES2021-12-10
CVE-2021-37415—100.0—YES2021-12-01
CVE-2021-40539—99.9—YES2021-11-03
CVE-2021-44077—99.8—YES2021-12-01
CVE-2022-28810—99.4—YES2023-03-07
CVE-2019-8394—99.1—YES2021-11-03

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2022-28810—99.4—YES2023-03-07
CVE-2022-35405—100.0—YES2022-09-22
CVE-2021-44515—100.0—YES2021-12-10
CVE-2021-44077—99.8—YES2021-12-01
CVE-2021-37415—100.0—YES2021-12-01
CVE-2019-8394—99.1—YES2021-11-03
CVE-2020-10189—100.0—YES2021-11-03
CVE-2021-40539—99.9—YES2021-11-03

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
ManageEngine55

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2022-288102023-03-07—99.4—
CVE-2022-354052022-09-22—100.0—
CVE-2021-445152021-12-10—100.0—
CVE-2021-440772021-12-01—99.8—
CVE-2021-374152021-12-01—100.0—
CVE-2019-83942021-11-03—99.1—
CVE-2020-101892021-11-03—100.0—
CVE-2021-405392021-11-03—99.9—

KEV timing

Fastest to KEV
CVEDays
CVE-2019-83940
CVE-2020-101890
CVE-2021-374150
CVE-2021-405390
CVE-2021-440770
CVE-2021-445150
CVE-2022-288100
CVE-2022-354050
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2021-405392021-11-171736
CVE-2021-374152021-12-151708
CVE-2021-440772021-12-151708
CVE-2021-445152021-12-241699
CVE-2020-101892022-05-031569
CVE-2019-83942022-05-031569
CVE-2022-354052022-10-131406
CVE-2022-288102023-03-281240

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.