Zohocorp Manageengine Admanager Plus vulnerabilities

• zohocorp manageengine admanager plus Path Traversal CVE-2025-9435 Public exploit 5.5 MediumJanuary 13, 2026
• zohocorp manageengine admanager plus NTLM Hash Exposure Vulnerability CVE-2025-11670 6.4 MediumDecember 15, 2025
• zohocorp manageengine admanager plus Command Injection CVE-2025-10020 8.5 HighOctober 21, 2025
• manageengine admanager plus, zohocorp manageengine admanager plus +1 more Privilege Escalation CVE-2024-24409 Public exploit 8.8 HighNovember 8, 2024
• manageengine admanager plus, zohocorp manageengine admanager plus +1 more SQL Injection CVE-2024-48878 8.3 HighNovember 4, 2024
• manageengine access manager plus, asset explorer, service desk plus +39 more +41 more ManageEngine Information Disclosure in Multiple Products CVE-2023-6105 5.5 MediumNovember 15, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST... CVE-2023-41904 5.4 MediumSeptember 26, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the... CVE-2023-38743 Public exploit EPSS 11.1% 7.2 HighSeptember 11, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus through 7202 allows admin users to download any file from the... CVE-2023-39912 4.9 MediumAugust 31, 2023
• zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 more Zoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass. CVE-2023-35785 8.1 HighAugust 28, 2023
• zohocorp manageengine admanager plus Incorrect access control in Zoho ManageEngine ADManager Plus Build 7180 allows unauthenticated... CVE-2023-31492 6.5 MediumAugust 17, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user... CVE-2023-38332 6.5 MediumAugust 4, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view... CVE-2023-35786 4.9 MediumJuly 5, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus through 7180 allows for authenticated users to exploit command... CVE-2023-29084 Public exploit EPSS 98.0% 7.2 HighApril 13, 2023
• zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 more Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow... CVE-2022-47966 In KEVPublic exploit EPSS 99.8% 9.8 CriticalJanuary 18, 2023
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the... CVE-2022-42904 EPSS 83.1% 7.2 HighNovember 18, 2022
• zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine admanager plus +1 more +3 more Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701,... CVE-2022-29457 Public exploit 8.8 HighApril 18, 2022
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file... CVE-2021-42002 9.8 CriticalNovember 11, 2021
• zohocorp manageengine admanager plus ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution... CVE-2021-20131 EPSS 16.8% 8.8 HighOctober 13, 2021
• zohocorp manageengine admanager plus ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution... CVE-2021-20130 EPSS 32.5% 8.8 HighOctober 13, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE. CVE-2021-38298 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite... CVE-2021-37762 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37919 EPSS 11.0% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37920 EPSS 11.0% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37921 EPSS 11.0% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37923 EPSS 11.0% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37924 EPSS 11.0% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which... CVE-2021-37922 5.3 MediumOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37918 EPSS 73.6% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37931 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37930 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37929 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37928 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which... CVE-2021-37926 EPSS 73.6% 9.8 CriticalOctober 7, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload... CVE-2021-37761 9.8 CriticalSeptember 27, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to... CVE-2021-37539 EPSS 92.9% 9.8 CriticalSeptember 27, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO. CVE-2021-37927 9.8 CriticalSeptember 22, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection... CVE-2021-37925 EPSS 10.5% 9.8 CriticalSeptember 22, 2021
• zohocorp manageengine admanager plus ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities. CVE-2021-37741 8.8 HighSeptember 21, 2021
• zohocorp manageengine admanager plus ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF. CVE-2021-37419 7.5 HighSeptember 21, 2021
• zohocorp manageengine admanager plus ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing. CVE-2021-37420 6.5 MediumSeptember 21, 2021
• zohocorp manageengine admanager plus ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover. CVE-2021-37424 9.8 CriticalSeptember 21, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7110 allows remote code execution. CVE-2021-33911 9.8 CriticalJuly 17, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS. CVE-2021-36771 6.1 MediumJuly 17, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7110 allows stored XSS. CVE-2021-36772 6.1 MediumJuly 17, 2021
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus before 7066 allows XSS. CVE-2020-35594 6.1 MediumMarch 5, 2021
• zohocorp manageengine exchange reporter plus, manageengine ad360, manageengine adaudit plus +8 more +10 more An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510,... CVE-2020-24786 EPSS 12.8% 9.8 CriticalAugust 31, 2020
• zohocorp manageengine admanager plus, manageengine adselfservice plus, manageengine desktop central +2 more Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have... CVE-2019-12876 7.3 HighJuly 17, 2019
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a... CVE-2018-19374 Public exploit 7.0 HighApril 30, 2019
• zohocorp manageengine admanager plus Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles"... CVE-2018-15740 Public exploit 6.1 MediumAugust 28, 2018
• Show olderLoading…