Zohocorp Manageengine Opmanager vulnerabilities

• zohocorp manageengine opmanager, manageengine opmanager, remote monitoring and management, zohocorp manageengine opmanager msp +3 more +5 more Remote Code Execution CVE-2024-5466 8.8 HighAugust 23, 2024
• manageengine opmanager, zohocorp manageengine opmanager, manageengine opmanager msp +2 more +4 more SQL Injection CVE-2024-6748 EPSS 23.8% 8.3 HighJuly 29, 2024
• manageengine opmanager, zohocorp manageengine opmanager, manageengine firewall analyzer +5 more +7 more A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine... CVE-2023-47211 EPSS 47.0% 9.1 CriticalJanuary 8, 2024
• manageengine access manager plus, asset explorer, service desk plus +39 more +41 more ManageEngine Information Disclosure in Multiple Products CVE-2023-6105 5.5 MediumNovember 15, 2023
• zohocorp manageengine opmanager Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code... CVE-2023-31099 EPSS 81.6% 8.8 HighMay 4, 2023
• manageengine opmanager, zohocorp manageengine opmanager, manageengine opmanager msp +1 more +3 more A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of... CVE-2022-43473 EPSS 19.8% 5.8 MediumMarch 30, 2023
• zohocorp manageengine opmanager, manageengine netflow analyzer, manageengine network configuration manager +3 more +5 more Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,... CVE-2022-38772 EPSS 78.0% 8.8 HighAugust 29, 2022
• zohocorp manageengine opmanager, manageengine firewall analyzer, manageengine netflow analyzer +4 more +6 more Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,... CVE-2022-36923 7.5 HighAugust 10, 2022
• zohocorp manageengine opmanager, manageengine firewall analyzer, manageengine netflow analyzer +4 more +6 more Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,... CVE-2022-37024 EPSS 80.0% 8.8 HighAugust 9, 2022
• zohocorp manageengine firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +1 more +3 more ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable... CVE-2022-35404 8.2 HighJuly 18, 2022
• zohocorp manageengine opmanager Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports. CVE-2022-29535 EPSS 91.8% 9.8 CriticalMay 5, 2022
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL... CVE-2022-27908 EPSS 36.5% 8.8 HighApril 18, 2022
• zohocorp manageengine opmanager ManageEngine's OpUtils 12.5.556 and prior allow access to a few audit directories without... CVE-2021-44514 9.8 CriticalDecember 9, 2021
• zohocorp manageengine opmanager The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection... CVE-2021-41075 9.8 CriticalOctober 13, 2021
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support... CVE-2021-40493 EPSS 50.2% 9.8 CriticalOctober 13, 2021
• zohocorp manageengine opmanager Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the... CVE-2021-41288 EPSS 79.6% 9.8 CriticalSeptember 30, 2021
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a... CVE-2021-3287 Public exploit EPSS 51.3% 9.8 CriticalApril 22, 2021
• zohocorp manageengine opmanager Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service... CVE-2021-20078 EPSS 59.5% 9.1 CriticalApril 1, 2021
• zohocorp manageengine opmanager Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows... CVE-2020-28653 Public exploit EPSS 77.9% 9.8 CriticalFebruary 3, 2021
• zohocorp manageengine opmanager In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal... CVE-2020-13818 EPSS 37.8% 7.5 HighJune 4, 2020
• zohocorp manageengine opmanager Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an... CVE-2020-12116 Public exploit EPSS 97.4% 7.5 HighMay 7, 2020
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key... CVE-2020-11946 EPSS 51.8% 7.5 HighApril 20, 2020
• zohocorp manageengine opmanager In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a... CVE-2020-11527 7.5 HighApril 4, 2020
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted... CVE-2020-10541 EPSS 10.1% 9.8 CriticalMarch 13, 2020
• zohocorp manageengine applications manager, manageengine it360, manageengine opmanager +2 more The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager... CVE-2014-7863 Public exploit EPSS 83.4% 7.5 HighFebruary 8, 2020
• zohocorp manageengine opmanager, manageengine firewall analyzer +1 more Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager... CVE-2019-17421 7.8 HighNovember 21, 2019
• zohocorp manageengine opmanager An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The... CVE-2019-17602 EPSS 81.1% 9.8 CriticalOctober 15, 2019
• zohocorp manageengine opmanager An issue was discovered in Zoho ManageEngine OpManager through 12.4x. One can bypass the user... CVE-2019-15106 Public exploit EPSS 25.5% 9.8 CriticalAugust 16, 2019
• zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 more Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper... CVE-2019-12133 7.8 HighJune 18, 2019
• zohocorp manageengine opmanager An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json... CVE-2017-11559 7.5 HighMay 23, 2019
• zohocorp manageengine opmanager An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the... CVE-2017-11560 5.4 MediumMay 23, 2019
• zohocorp manageengine opmanager An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any... CVE-2017-11561 6.5 MediumMay 23, 2019
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms... CVE-2018-20339 6.1 MediumDecember 21, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section. CVE-2018-20338 EPSS 11.5% 9.8 CriticalDecember 21, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. CVE-2018-20173 EPSS 24.5% 9.8 CriticalDecember 17, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller. CVE-2018-19921 6.1 MediumDecember 6, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability. CVE-2018-18716 6.1 MediumNovember 20, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS. CVE-2018-18715 6.1 MediumNovember 20, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. CVE-2018-19288 6.1 MediumNovember 15, 2018
• zohocorp manageengine network configuration manager, manageengine opmanager +1 more An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network... CVE-2018-18980 EPSS 25.0% 7.5 HighNovember 6, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. CVE-2018-18949 EPSS 24.5% 9.8 CriticalNovember 5, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. CVE-2018-18475 EPSS 20.4% 9.8 CriticalOctober 23, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 12.3 before build 123214 has XSS. CVE-2018-18262 6.1 MediumOctober 17, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for ... CVE-2018-17283 EPSS 66.3% 7.5 HighSeptember 21, 2018
• zohocorp manageengine opmanager Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection. CVE-2018-17243 EPSS 75.5% 9.8 CriticalSeptember 20, 2018
• zohocorp firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +2 more +4 more A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before... CVE-2018-12998 EPSS 99.2% 6.1 MediumJune 29, 2018
• zohocorp firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +2 more +4 more Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before... CVE-2018-12997 7.5 HighJune 29, 2018
• zohocorp manageengine opmanager Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the... CVE-2015-9107 9.8 CriticalAugust 4, 2017
• zohocorp manageengine opmanager PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote... CVE-2015-7766 Public exploit EPSS 80.6% 9.0 HighOctober 9, 2015
• zohocorp manageengine opmanager ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin"... CVE-2015-7765 Public exploit EPSS 67.3% 9.0 HighOctober 9, 2015
• Show olderLoading…