Client Connector
Vendor:
First CVE: Feb 16, 2021 · Active for 5 years
42
Total CVEs
More Total CVEs than 98% of tracked products
8.4
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 51% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Client Connector over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 16, 2021
5 years ago
Most Recent CVE
Mar 31, 2026
119 days ago
CVE Severity & Scoring
Client Connector42 CVEs
29%
57%
14%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local23 (54.8%)
Network17 (40.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network2 (4.8%)
Attack Complexity
Low40 (95.2%)
High2 (4.8%)
Unknown0 (0.0%)
User Interaction
None35 (83.3%)
Unknown0 (0.0%)
Required7 (16.7%)
Privileges Required
Low22 (52.4%)
High1 (2.4%)
None19 (45.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-11633CRITICAL The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been | Jul 15, 2021 | 9.8 | 29 | NO | NO |
CVE-2024-3661HIGH DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to l | May 6, 2024 | 7.6 | 27 | NO | NO |
CVE-2024-23480CRITICAL A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.
| May 1, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-23483CRITICAL An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2. | Aug 6, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-23459CRITICAL An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler | May 2, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-28798CRITICAL An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution. | May 2, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-28805CRITICAL An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation. This issue affects Client Connector: before 1.4.0.105 | Oct 23, 2023 | 9.8 | 26 | NO | NO |
CVE-2023-41973HIGH ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe | Mar 26, 2024 | 7.8 | 25 | NO | NO |
CVE-2023-41972HIGH In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later. | Mar 26, 2024 | 7.8 | 24 | NO | NO |
CVE-2024-23463HIGH Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zscaler Client Connector | Apr 30, 2024 | 8.1 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Client Connector
Top CWEs
Versions
No cataloged versions.