Zohocorp Log360 vulnerabilities

• zohocorp eventlog analyzer, log360 +1 more Authentication Bypass CVE-2026-16900 7.5 HighNovember 3, 2026
• zohocorp eventlog analyzer, log360 +1 more Improper Access Control vulnerability CVE-2026-13594 9.1 CriticalNovember 3, 2026
• zohocorp manageengine eventlog analyzer, manageengine log360 +1 more Remote Code Execution CVE-2026-8923 8.7 HighNovember 2, 2026
• zohocorp manageengine eventlog analyzer, manageengine log360 +1 more Denial of Service Vulnerability CVE-2026-92905 5.3 MediumSeptember 24, 2026
• zohocorp manageengine log360 Authentication Bypass CVE-2026-3324 8.2 HighApril 16, 2026
• manageengine access manager plus, asset explorer, service desk plus +39 more +41 more ManageEngine Information Disclosure in Multiple Products CVE-2023-6105 5.5 MediumNovember 15, 2023
• zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 more Zoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass. CVE-2023-35785 8.1 HighAugust 28, 2023
• zohocorp log360, manageengine cloud security plus +1 more Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the... CVE-2021-44651 8.8 HighJanuary 12, 2022
• zohocorp manageengine log360 ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability... CVE-2021-20136 EPSS 10.8% 9.8 CriticalNovember 1, 2021
• zohocorp manageengine log360 Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings. CVE-2021-40172 8.8 HighAugust 29, 2021
• zohocorp manageengine log360 Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security... CVE-2021-40174 8.8 HighAugust 29, 2021
• zohocorp manageengine log360 Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote... CVE-2021-40175 9.8 CriticalAugust 29, 2021
• zohocorp manageengine log360 Zoho ManageEngine Log360 before Build 5225 allows stored XSS. CVE-2021-40176 6.1 MediumAugust 29, 2021
• zohocorp manageengine log360 Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite. CVE-2021-40177 9.8 CriticalAugust 29, 2021
• zohocorp manageengine log360 Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the... CVE-2021-40178 6.1 MediumAugust 29, 2021
• zohocorp manageengine exchange reporter plus, manageengine ad360, manageengine adaudit plus +8 more +10 more An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510,... CVE-2020-24786 EPSS 12.8% 9.8 CriticalAugust 31, 2020