ZenTao Max vulnerabilities

1 known vulnerability in ZenTao Max from Qingdao Esoft Tianchuang Network Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  ZenTao Biz: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-4984Nov 13, 2025Qingdao Esoft Tianchuang Network Technology

  ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/us