Manageengine vulnerabilities

Products

• Adaudit Plus 35
• Adaudit Plus 26
• Applications Manager 23
• Servicedesk Plus 11
• Applications Manager 8
• Exchange Reporter Plus 8
• Ddi Central 7
• Opmanager 7
• Adselfservice Plus 5
• Password Manager Pro 5
• Desktop Central 4
• Endpoint Central 4
• Firewall Analyzer 4
• Servicedesk Plus Msp 4
• Desktop Central 3
• Eventlog Analyzer 3
• Exchange Reporter Plus 3
• It360 3
• Oputils 3
• Pam360 3
• Servicedesk Plus 3
• Sharepoint Manager Plus 3
• Supportcenter Plus 3
• Admanager Plus 2
• Admanager Plus 2
• Analytics Plus 2
• Asset Explorer 2
• Assetexplorer 2
• Netflow Analyzer 2
• Servicedesk 2
• Supportcenter 2
• Supportcenter Plus 2

Newest

• manageengine sharepoint manager plus Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus CVE-2026-119682 7.9 HighOctober 30, 2026
• manageengine sharepoint manager plus Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature CVE-2026-119680 8.5 HighOctober 30, 2026
• manageengine ddi central Missing Authorization on HA Failover Config allows Complete Data Destruction CVE-2026-12265 8.8 HighSeptember 28, 2026
• manageengine ddi central Authenticated File Write via HA Failover Config Upload leads to RCE CVE-2026-12264 8.8 HighSeptember 28, 2026
• manageengine ddi central Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE CVE-2026-12267 7.2 HighSeptember 28, 2026
• manageengine ddi central Authenticated PowerShell Injection leads to RCE CVE-2026-12268 8.8 HighSeptember 28, 2026
• manageengine ddi central Authenticated File Write to RCE via keepalived in DDI Central CVE-2026-12269 8.8 HighSeptember 28, 2026
• manageengine asset explorer, servicedesk plus, servicedesk plus msp +1 more +3 more User privilege escalation vulnerability CVE-2025-8309 8.1 HighAugust 20, 2025
• manageengine applications manager, zohocorp manageengine applications manager +1 more Stored XSS CVE-2025-27930 6.4 MediumJuly 23, 2025
• manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 more Stored XSS CVE-2025-5966 8.1 HighJune 26, 2025
• manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 more Stored XSS CVE-2025-5366 8.1 HighJune 26, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-41444 8.3 HighJune 9, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-36528 8.3 HighJune 9, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-27709 8.3 HighJune 9, 2025
• manageengine opmanager Reflected XSS CVE-2025-41437 4.3 MediumJune 9, 2025
• manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 more Remote Code Execution CVE-2025-3835 9.6 CriticalJune 9, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-41407 8.3 HighMay 23, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-36527 EPSS 42.0% 8.3 HighMay 23, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-41403 8.3 HighMay 22, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-3836 8.3 HighMay 22, 2025
• manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 more Local File Inclusion CVE-2025-3444 6.5 MediumMay 22, 2025
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2025-3834 8.1 HighMay 14, 2025
• manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 more SQL Injection CVE-2025-3833 EPSS 50.5% 8.1 HighMay 14, 2025
• manageengine servicedesk plus, servicedesk plus msp, supportcentre plus +3 more +5 more Stored XSS CVE-2024-50053 6.3 MediumMarch 21, 2025
• manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 more Account takeover CVE-2025-1723 8.1 HighMarch 3, 2025
• manageengine endpoint central, zohocorp manageengine endpoint central +1 more IDOR CVE-2024-9097 3.5 LowFebruary 5, 2025
• manageengine applications manager, zohocorp manageengine applications manager +1 more Improper Authorization CVE-2024-41140 8.1 HighJanuary 29, 2025
• manageengine analytics plus, zohocorp manageengine analytics plus +1 more Sensitive Data Exposure CVE-2024-52323 8.1 HighNovember 27, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-49574 8.3 HighNovember 18, 2024
• manageengine sharepoint manager plus, zohocorp manageengine sharepoint manager plus +1 more XML External Entity CVE-2024-10839 8.5 HighNovember 8, 2024
• manageengine admanager plus, zohocorp manageengine admanager plus +1 more Privilege Escalation CVE-2024-24409 Public exploit 8.8 HighNovember 8, 2024
• manageengine endpoint central, zohocorp manageengine endpoint central +1 more Agent Arbitrary File Deletion CVE-2024-10203 7.0 HighNovember 7, 2024
• manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 more SQL Injection CVE-2024-9459 8.3 HighNovember 5, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-36485 8.3 HighNovember 4, 2024
• manageengine admanager plus, zohocorp manageengine admanager plus +1 more SQL Injection CVE-2024-48878 8.3 HighNovember 4, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-5608 8.3 HighOctober 24, 2024
• manageengine analytics plus Local File Inclusion CVE-2024-9100 6.5 MediumOctober 3, 2024
• manageengine endpoint central, zohocorp manageengine endpoint central +1 more Incorrect Authorization CVE-2024-38868 7.6 HighAugust 30, 2024
• manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 more SQL injection CVE-2024-6204 8.3 HighAugust 30, 2024
• manageengine pam360, password manager pro, zohocorp manageengine pam360 +1 more +3 more SQL Injection CVE-2024-5546 8.3 HighAugust 28, 2024
• manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 more Stored XSS CVE-2024-41150 6.3 MediumAugust 23, 2024
• manageengine endpoint central, zohocorp manageengine endpoint central, manageengine servicedesk plus +2 more +4 more Incorrect Authorization CVE-2024-38869 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-5586 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-5556 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-5490 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-36514 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-36515 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-36516 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-36517 8.3 HighAugust 23, 2024
• manageengine adaudit plus, zohocorp manageengine adaudit plus +1 more SQL Injection CVE-2024-5467 8.3 HighAugust 23, 2024
• Show olderLoading…