Skip to contentZohocorp Manageengine Applications Manager vulnerabilities
- zohocorp manageengine applications managerStored XSSCVE-2025-97876.1 Medium
- zohocorp manageengine applications managerInformation disclosureCVE-2025-62396.5 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreStored XSSCVE-2025-279306.4 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreImproper AuthorizationCVE-2024-411408.1 High
- manageengine applications manager, zohocorp manageengine applications manager +1 moreSQL InjectionCVE-2024-56784.7 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.CVE-2023-383336.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16390 allows DOM XSS.CVE-2023-294426.1 Medium
- zohocorp manageengine applications managerStored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through...CVE-2023-28341EPSS 98.7%6.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack.CVE-2023-283406.5 Medium
- zohocorp manageengine applications managerManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL...CVE-2022-230507.2 High
- zohocorp manageengine applications managerA vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build...CVE-2020-286798.8 High
- zohocorp manageengine applications managerAn issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows...CVE-2020-247439.8 Critical
- zohocorp manageengine applications managerAn SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.CVE-2021-355126.5 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing...CVE-2021-31813EPSS 78.3%5.4 Medium
- zohocorp manageengine applications managerdoFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications...CVE-2020-35765EPSS 27.3%8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL...CVE-2020-277338.8 High
- zohocorp manageengine applications managerSQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to...CVE-2020-279959.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker...CVE-2020-108167.5 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL...CVE-2020-16267EPSS 41.1%8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL...CVE-2020-15927EPSS 41.1%8.8 High
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and...CVE-2020-155339.8 Critical
- zohocorp manageengine applications managerThe REST API in Zoho ManageEngine Applications Manager before build 14740 allows an...CVE-2020-15394Public exploit9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header...CVE-2020-155216.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to...CVE-2020-14008Public exploitEPSS 39.6%7.2 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14590 and before allows a remote unauthenticated attacker...CVE-2019-197995.3 Medium
- zohocorp manageengine applications manager, manageengine it360, manageengine opmanager +2 moreThe FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager...CVE-2014-7863Public exploitEPSS 83.4%7.5 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker...CVE-2019-198005.3 Medium
- zohocorp manageengine applications managerAn issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated...CVE-2019-194758.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection...CVE-2019-196499.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection...CVE-2019-196508.8 High
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection...CVE-2019-15104Public exploit8.8 High
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL...CVE-2019-15105Public exploit8.8 High
- zohocorp manageengine applications managerAn issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an...CVE-2017-115575.3 Medium
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, the 'haid' parameter of the '...CVE-2017-117388.1 High
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with...CVE-2017-117396.1 Medium
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the...CVE-2017-117408.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid...CVE-2019-11469Public exploitEPSS 17.0%9.8 Critical
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An...CVE-2019-11448Public exploitEPSS 12.4%9.8 Critical
- zohocorp manageengine applications managerA serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows...CVE-2018-16364EPSS 17.9%8.1 High
- zohocorp manageengine applications managerA reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13...CVE-2018-151696.1 Medium
- zohocorp manageengine applications managerA SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before...CVE-2018-151689.8 Critical
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objectsCVE-2016-9498EPSS 21.2%9.8 Critical
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entityCVE-2016-94914.9 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypassCVE-2016-94898.8 High
- zohocorp manageengine applications managerA SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build...CVE-2018-13050EPSS 39.3%9.8 Critical
- zohocorp manageengine applications managerA reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager...CVE-2018-129966.1 Medium
- zohocorp manageengine applications managerIncorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager...CVE-2018-118089.1 Critical
- zohocorp manageengine applications managerA remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13...CVE-2018-7890Public exploitEPSS 78.8%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage...CVE-2017-16851EPSS 16.6%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...CVE-2017-16850EPSS 16.6%9.8 Critical
- Show olderLoading…