Catalyst Connect Zoho CRM Client Portal

Catalyst Connect Zoho CRM Client Portal has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 6.1 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.1/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Catalyst Connect Zoho CRM Client Portal vulnerabilities before they are exploited.

Most severe open issueCVSS 4.9CVE-2025-5017

Catalyst Connect Zoho CRM Client Portal <= 2.2.0 - Authenticated (Administrator+) SQL Injection via uid Parameter

Read the full analysis

Vulnerability Records

3 records


2026-07-10 17:13	Catalyst Connect Zoho CRM Client Portal <= 2.2.0 - Authenticated (Administrator+) SQL Injection via uid Parameter Catalyst Connect Zoho CRM Client Portal <= 2.2.0	`CVE-2025-5017`	4.9 Medium	siyuan shao	No
2023-06-27 00:00	Catalyst Connect Zoho CRM Client Portal <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Catalyst Connect Zoho CRM Client Portal <= 2.0.0	`CVE-2022-44629`	4.4 Medium	Hoang Van Hiep	Yes
2023-06-05 00:00	Catalyst Connect Zoho CRM Client Portal <= 2.0.0 - Reflected Cross-Site Scripting Catalyst Connect Zoho CRM Client Portal <= 2.0.0	`CVE-2023-0588`	6.1 Medium	Shreya Pohekar	Yes

Showing 1–3 of 3 reports