[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkR_YBwxid-EHZJM_wFZQteFJ1s6ZEqoCGPSvOTTOk9I":3,"g5a-ex:zscaler\u002Fclient_connector@*":296,"g5a-family:zscaler\u002Fclient_connector":298},{"success":4,"data":5},true,{"product":6,"versions":150,"topVulnerabilitiesByEpss":218,"kevVulnerabilities":273,"seoMetadata":274,"meta":293},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":149},"zscaler","client_connector",67,31,0,"2024-08-06",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.2",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.3",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.4",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.12",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.3",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0.31",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.1.6",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.4",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0.105",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0.58",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.1.25",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.9",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.3",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.4",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.5",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.6",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.7",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"2.1",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2.105",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2.112",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2.113",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2.81",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"3.1",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0.111",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0.117",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0.129",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"3.2",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0.87",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1.1",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"3.4",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0.124",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.1.4",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"3.5",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.0.108",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"3.6",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.1",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.1.20",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.1.23",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.1.26",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"3.7",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.0.134",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.0.182",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.0.183",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.1",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.1.42",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.1.48",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.1.49",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"3.9",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"3.9.0.81",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"3.9.0.90",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"3.9.0.95",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"4.1",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0.102",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0.82",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0.85",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0.89",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0.98",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"4.2",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0.149",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0.173",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0.190",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0.282",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.1","Client Connector by Zscaler is a technology product with 67 tracked versions and 31 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},[219,227,234,238,245,250,254,259,264,269],{"cveId":220,"description":221,"publishedDate":222,"cvssScore":223,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":226},"CVE-2024-3661","DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.","2024-05-06",7.6,"v3.1","High",0.04063,{"cveId":228,"description":229,"publishedDate":230,"cvssScore":231,"cvssVersion":224,"severity":232,"isKev":16,"epssScore":233},"CVE-2020-11633","The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges.","2021-07-15",9.8,"Critical",0.01891,{"cveId":235,"description":236,"publishedDate":12,"cvssScore":231,"cvssVersion":224,"severity":232,"isKev":16,"epssScore":237},"CVE-2024-23483","An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS \u003C4.2.",0.00748,{"cveId":239,"description":240,"publishedDate":241,"cvssScore":242,"cvssVersion":224,"severity":243,"isKev":16,"epssScore":244},"CVE-2023-28800","When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login.","2023-06-22",6.1,"Medium",0.00548,{"cveId":246,"description":247,"publishedDate":230,"cvssScore":248,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":249},"CVE-2020-11634","The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context.",7.8,0.00465,{"cveId":251,"description":252,"publishedDate":241,"cvssScore":242,"cvssVersion":224,"severity":243,"isKev":16,"epssScore":253},"CVE-2023-28799","A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.",0.00445,{"cveId":255,"description":256,"publishedDate":257,"cvssScore":248,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":258},"CVE-2020-11635","The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges.","2021-02-16",0.00444,{"cveId":260,"description":261,"publishedDate":12,"cvssScore":262,"cvssVersion":224,"severity":243,"isKev":16,"epssScore":263},"CVE-2024-23464","In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows \u003C4.2.1",4.9,0.00431,{"cveId":265,"description":266,"publishedDate":267,"cvssScore":231,"cvssVersion":224,"severity":232,"isKev":16,"epssScore":268},"CVE-2023-28805","An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation. This issue affects Client Connector: before 1.4.0.105","2023-10-23",0.00348,{"cveId":270,"description":271,"publishedDate":230,"cvssScore":248,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":272},"CVE-2020-11632","The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges.",0.00318,[],{"title":275,"metaDescription":276,"keywords":277,"structuredData":278},"Client Connector by Zscaler - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Client Connector by Zscaler covering 67 versions with 31 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Client Connector vulnerabilities, Client Connector security, Client Connector CVE, Zscaler Client Connector, Client Connector threat intelligence, Zscaler security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":279,"@type":280,"name":281,"description":276,"url":282,"manufacturer":283,"applicationCategory":287,"softwareVersion":288,"mainEntity":289},"https:\u002F\u002Fschema.org","SoftwareApplication","Client Connector","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fzscaler\u002Fclient_connector",{"@type":284,"name":285,"url":286},"Organization","Zscaler","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fzscaler","Security Software","67 versions tracked",{"@type":290,"name":291,"description":292,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Client Connector Security Vulnerabilities","Security vulnerabilities affecting Client Connector by Zscaler",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":294,"apiVersion":295},"2026-10-18T15:22:54.591Z","3.0",{"rows":297,"total":11,"capped":16,"failed":11},[],[]]