Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Manageengine

Manageengine vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

manageengine applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...CVE-2020-147616.5 MediumOctober 21, 2020
manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2019-28256.5 MediumJuly 23, 2019
manageengine applications manager, oracle e-business suite +1 moreVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2019-25464.3 MediumJanuary 16, 2019
manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2018-32375.3 MediumOctober 17, 2018
manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2018-32358.2 HighOctober 17, 2018
manageengine admanager plusZoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk...CVE-2018-15608Public exploit6.1 MediumAugust 28, 2018
manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2018-29967.5 HighJuly 18, 2018
manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objectsCVE-2016-9498EPSS 21.2%9.8 CriticalJuly 13, 2018
manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entityCVE-2016-94914.9 MediumJuly 13, 2018
manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypassCVE-2016-94898.8 HighJuly 13, 2018
manageengine applications managerManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerabilityCVE-2016-94906.1 MediumJune 5, 2018
manageengine applications managerManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilitiesCVE-2016-9488Public exploit9.8 CriticalJune 5, 2018
manageengine servicedesk, zoho manageengine servicedesk +1 moreThe ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper...CVE-2017-11512EPSS 79.6%7.5 HighNovember 8, 2017
manageengine servicedesk, zoho manageengine servicedesk +1 moreThe ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper...CVE-2017-115117.5 HighNovember 8, 2017
manageengine desktop centralThe FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote...CVE-2015-8249Public exploitEPSS 73.6%9.8 CriticalSeptember 27, 2017
manageengine assetexplorer, it360, servicedesk plus +1 more +3 moreDirectory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030;...CVE-2014-5302EPSS 10.7%8.8 HighAugust 28, 2017
manageengine assetexplorer, it360, servicedesk plus +1 more +3 moreDirectory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to...CVE-2014-5301Public exploitEPSS 78.4%8.8 HighAugust 28, 2017
manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2017-32774.9 MediumJanuary 27, 2017
manageengine servicedesk plusZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users...CVE-2015-1480Public exploit4.0 MediumFebruary 4, 2015
manageengine netflow analyzerDirectory traversal vulnerability in the CollectorConfInfoServlet servlet in ManageEngine NetFlow...CVE-2014-937310.0 HighDecember 16, 2014
manageengine password manager proDirectory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password...CVE-2014-93726.4 MediumDecember 16, 2014
manageengine desktop central, it360, password manager pro +2 moreSQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central ...CVE-2014-3996Public exploitEPSS 38.4%7.5 HighDecember 5, 2014
manageengine oputilsThe ConfigSaveServlet servlet in ManageEngine OpUtils before build 71024 allows remote attackers...CVE-2014-86787.8 HighNovember 25, 2014
manageengine password manager proMultiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password...CVE-2014-8499Public exploitEPSS 36.4%6.5 MediumNovember 17, 2014
manageengine device expertReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote...CVE-2014-5377Public exploitEPSS 57.5%5.0 MediumSeptember 4, 2014
manageengine firewall analyzerCross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2...CVE-2012-4891Public exploit4.3 MediumSeptember 10, 2012
manageengine firewall analyzerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow...CVE-2012-4889Public exploit4.3 MediumSeptember 10, 2012
manageengine servicedesk plusMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow...CVE-2012-2585Public exploit4.3 MediumAugust 12, 2012
manageengine applications managerMultiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow...CVE-2012-10637.5 HighFebruary 14, 2012
manageengine applications managerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and...CVE-2012-10624.3 MediumFebruary 14, 2012
manageengine admanager plusMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210...CVE-2012-1049Public exploit4.3 MediumFebruary 13, 2012
manageengine eventlog analyzerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow...CVE-2010-48414.3 MediumSeptember 27, 2011
manageengine eventlog analyzerMultiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote...CVE-2010-48407.5 HighSeptember 27, 2011
manageengine servicedesk plusCross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus ...CVE-2011-15104.3 MediumSeptember 20, 2011
manageengine servicedesk plusThe encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier...CVE-2011-15095.0 MediumSeptember 20, 2011
manageengine servicedesk plusDirectory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12...CVE-2011-2757Public exploitEPSS 39.4%5.0 MediumJuly 17, 2011
manageengine servicedesk plusFileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require...CVE-2011-27565.0 MediumJuly 17, 2011
manageengine servicedesk plusDirectory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before...CVE-2011-2755Public exploitEPSS 30.9%5.0 MediumJuly 17, 2011
manageengine adaudit plusCross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine...CVE-2010-20494.3 MediumMay 25, 2010
manageengine oputilsSQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to...CVE-2010-1044Public exploit7.5 HighMarch 22, 2010
manageengine password manager pro, password manager pro6.1 +1 moreThe cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine...CVE-2009-43874.3 MediumDecember 22, 2009
manageengine netflow analyzerMultiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow...CVE-2009-39034.3 MediumNovember 6, 2009
manageengine oputilsCross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows...CVE-2008-27974.3 MediumJune 20, 2008
manageengine firewall analyzerCross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3...CVE-2008-17753.5 LowApril 14, 2008
manageengine applications managerCross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x...CVE-2008-15664.3 MediumMarch 31, 2008
manageengine eventlog analyzerCross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5...CVE-2008-15384.3 MediumMarch 28, 2008
manageengine supportcenter plusCross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine SupportCenter Plus...CVE-2008-14324.3 MediumMarch 20, 2008
manageengine servicedesk plusCross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7...CVE-2008-12994.3 MediumMarch 12, 2008
manageengine applications managerManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do...CVE-2008-04766.4 MediumJanuary 29, 2008
manageengine applications managerManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive...CVE-2008-04755.0 MediumJanuary 29, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open