Skip to contentZohocorp Manageengine Adaudit Plus vulnerabilities
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine m365 manager plus +1 more +3 moreAccount Takeover via Predictable SSO Ticket GenerationCVE-2026-11374Public exploit9.0 Critical
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-414448.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-365288.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-277098.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-414078.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-36527EPSS 42.0%8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-414038.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-38368.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2025-38348.1 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-495748.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-364858.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-56088.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-55868.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-55568.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-54908.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-365148.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-365158.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-365168.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-365178.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-54678.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-360348.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-360358.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-365188.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-54878.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-55278.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreInsufficient Access Control VulnerabilityCVE-2024-360375.5 Medium
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreInsufficient Access Control VulnerabilityCVE-2024-360364.2 Medium
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection in ADAudit PlusCVE-2024-217914.7 Medium
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server...CVE-2023-493358.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full...CVE-2023-493348.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph...CVE-2023-493338.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.CVE-2023-493328.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports...CVE-2023-493318.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7251 allows SQL Injection while getting aggregate report...CVE-2023-493308.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-02698.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-02538.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.CVE-2023-487939.8 Critical
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export...CVE-2023-487929.8 Critical
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary...CVE-2023-507852.7 Low
- manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 Medium
- zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.CVE-2023-357858.1 High
- zohocorp manageengine adaudit plusThe event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass...CVE-2023-32783Disputed7.5 High
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.CVE-2023-373085.4 Medium
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 Critical
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine admanager plus +1 more +3 moreZoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701,...CVE-2022-29457Public exploit8.8 High
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that...CVE-2022-28219Public exploitEPSS 97.0%9.8 Critical
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on...CVE-2022-249788.8 High
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary...CVE-2021-42847Public exploitEPSS 70.3%9.8 Critical
- zohocorp manageengine exchange reporter plus, manageengine ad360, manageengine adaudit plus +8 more +10 moreAn issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510,...CVE-2020-24786EPSS 12.8%9.8 Critical
- zohocorp manageengine datasecurity plus, manageengine adaudit plus +1 moreZoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate...CVE-2020-11532EPSS 77.5%9.8 Critical
- Show olderLoading…