Approved changes feed: RSS · Atom

cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorZscaler (8b33ada7-550b-5f0e-9389-e0b74c251549)
ProductClient Connector (bb852fb1-4e37-50bb-bf86-92fbacf5703d)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22569 vulnerable 2026-06-08 07:51:13.095018 Incorrect startup configuration in ZCC
MEDIUM (5.4)
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.
Published: 2026-03-31T14:54:57.241Z
Updated: 2026-03-31T17:24:13.723Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23464 vulnerable 2026-06-08 06:29:39.772756 Zscaler bypass with administrative privileges on Windows
HIGH (7.2)
In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1
Published: 2024-08-06T15:24:03.730Z
Updated: 2024-08-06T15:41:17.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23463 vulnerable 2026-06-08 06:29:39.772284 Anti-Tampering bypass via Repair App functionality
HIGH (8.8)
Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zscaler Client Connector on Windows prior to 4.2.1
Published: 2024-04-30T16:17:53.710Z
Updated: 2024-08-29T19:20:46.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23458 vulnerable 2026-06-08 06:29:39.766623 Local Privilege Escalation on Zscaler Client Connector on Windows
HIGH (7.3)
While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.
Published: 2024-08-06T15:22:58.963Z
Updated: 2024-08-06T18:36:26.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23457 vulnerable 2026-06-08 06:29:39.766202 Anti-tampering can be disabled with uninstall password enforced
HIGH (7.8)
The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209
Published: 2024-05-01T16:26:11.546Z
Updated: 2024-08-01T23:06:24.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23456 vulnerable 2026-06-08 06:29:39.764534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41973 vulnerable 2026-06-08 06:11:07.577532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41972 vulnerable 2026-06-08 06:11:07.576913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41971 vulnerable 2026-06-08 06:11:07.576421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41970 vulnerable 2026-06-08 06:11:07.575912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41969 vulnerable 2026-06-08 06:11:07.574621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28806 vulnerable 2026-06-08 06:02:35.783807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28803 vulnerable 2026-06-08 06:02:35.782164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28802 vulnerable 2026-06-08 06:02:35.781650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28800 vulnerable 2026-06-08 06:02:35.776046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28799 vulnerable 2026-06-08 06:02:35.774486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28797 vulnerable 2026-06-08 06:02:35.761866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26736 vulnerable 2026-06-08 05:30:45.194992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26735 vulnerable 2026-06-08 05:30:45.194590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26734 vulnerable 2026-06-08 05:30:45.194093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11635 vulnerable 2026-06-08 05:16:47.529114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11634 vulnerable 2026-06-08 05:16:47.527669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11633 vulnerable 2026-06-08 05:16:47.527367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11632 vulnerable 2026-06-08 05:16:47.526973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.