Zoho Manageengine vulnerabilities

• zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 more Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow... CVE-2022-47966 In KEVPublic exploit EPSS 99.8% 9.8 CriticalJanuary 18, 2023
• zoho manageengine, zohocorp manageengine access manager plus, manageengine password manager pro +1 more +3 more Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to... CVE-2022-35405 In KEVPublic exploit EPSS 99.9% 9.8 CriticalJuly 19, 2022
• zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote... CVE-2022-28810 In KEVPublic exploit EPSS 71.0% 6.8 MediumApril 18, 2022
• zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 more Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and... CVE-2021-44077 In KEVPublic exploit EPSS 93.3% 9.8 CriticalNovember 29, 2021
• zoho manageengine remote access plus server Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a... CVE-2021-42956 7.8 HighNovember 17, 2021
• zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API... CVE-2021-40539 In KEVPublic exploit EPSS 99.0% 9.8 CriticalSeptember 7, 2021
• zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 more Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that... CVE-2021-37415 In KEV EPSS 99.8% 9.8 CriticalSeptember 1, 2021
• zoho manageengine servicedesk plus Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows... CVE-2021-20081 EPSS 52.4% 7.2 HighJune 10, 2021
• zoho manageengine servicedesk plus Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and... CVE-2021-20080 EPSS 93.1% 6.1 MediumApril 9, 2021
• zoho manageengine, zohocorp manageengine desktop central +1 more Zoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of... CVE-2020-10189 In KEVPublic exploit EPSS 99.9% 9.8 CriticalMarch 6, 2020
• zoho manageengine, zohocorp manageengine servicedesk plus +1 more Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to... CVE-2019-8394 In KEVPublic exploit EPSS 63.3% 6.5 MediumFebruary 17, 2019
• manageengine servicedesk, zoho manageengine servicedesk +1 more The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper... CVE-2017-11512 EPSS 79.6% 7.5 HighNovember 8, 2017
• manageengine servicedesk, zoho manageengine servicedesk +1 more The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper... CVE-2017-11511 7.5 HighNovember 8, 2017