Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp site24x7 mobile network pollerThe Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X...CVE-2017-145825.9 Medium
- zohocorp manageengine firewall analyzerZoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the ...CVE-2017-141238.8 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the...CVE-2015-91079.8 Critical
- zohocorp manageengine desktop centralManage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of...CVE-2015-2560EPSS 15.2%9.8 Critical
- zohocorp manageengine eventlog analyzerMultiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display...CVE-2017-116876.1 Medium
- zohocorp manageengine eventlog analyzerZoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an...CVE-2017-116866.1 Medium
- zohocorp manageengine eventlog analyzerMultiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event...CVE-2017-116856.1 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute...CVE-2017-11346Public exploitEPSS 43.3%9.8 Critical
- zohocorp manageengine firewall analyzerManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.CVE-2015-77817.5 High
- zohocorp manageengine firewall analyzerDirectory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.CVE-2015-7780EPSS 10.6%6.5 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control...CVE-2017-721310.0 Critical
- zohocorp password manager proCross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 ...CVE-2016-11618.0 High
- zohocorp servicedesk plusZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies,...CVE-2016-48905.3 Medium
- zohocorp servicedesk plusZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have...CVE-2016-48898.8 High
- zohocorp servicedesk plusCross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows...CVE-2016-48885.4 Medium
- zohocorp webnms frameworkZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and...CVE-2016-6603Public exploitEPSS 86.9%9.8 Critical
- zohocorp webnms frameworkZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which...CVE-2016-6602Public exploitEPSS 55.7%9.8 Critical
- zohocorp webnms frameworkDirectory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2...CVE-2016-6601Public exploitEPSS 97.5%7.5 High
- zohocorp webnms frameworkDirectory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2...CVE-2016-6600Public exploitEPSS 90.8%9.8 Critical
- zohocorp manageengine opmanagerPGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote...CVE-2015-7766Public exploitEPSS 80.6%9.0 High
- zohocorp manageengine opmanagerZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin"...CVE-2015-7765Public exploitEPSS 67.3%9.0 High
- zohocorp manageengine eventlog analyzerZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to...CVE-2015-7387Public exploitEPSS 80.2%7.5 High
- zohocorp manageengine password manager proSQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine...CVE-2015-54596.5 Medium
- zohocorp manageengine supportcenter plusMultiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90...CVE-2015-5150Public exploit3.5 Low
- zohocorp manageengine supportcenter plusDirectory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote...CVE-2015-5149Public exploitEPSS 10.4%5.5 Medium
- zohocorp manageengine assetexplorerCross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112...CVE-2015-50613.5 Low
- zohocorp manageengine assetexplorerCross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112...CVE-2015-2169Public exploit4.3 Medium
- zohocorp manageengine netflow analyzerZoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a...CVE-2015-44185.0 Medium
- zohocorp manageengine netflow analyzerCross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier...CVE-2015-29616.8 Medium
- zohocorp manageengine netflow analyzerCross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows...CVE-2015-29604.3 Medium
- zohocorp manageengine netflow analyzerZoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization,...CVE-2015-29597.5 High
- zohocorp manageengine admanager plusMultiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6...CVE-2015-10264.3 Medium
- zohocorp servicedesk plusSQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk...CVE-2015-1479Public exploit6.5 Medium
- zohocorp manageengine desktop centralCross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9...CVE-2014-9331Public exploit6.8 Medium
- zohocorp manageengine opmanagerMultiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in...CVE-2014-7864Public exploitEPSS 22.7%7.5 High
- zohocorp manageengine supportcenter plusMultiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9...CVE-2015-08664.3 Medium
- zohocorp manageengine supportcenter plusDirectory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows...CVE-2014-100002Public exploitEPSS 59.9%5.0 Medium
- zohocorp manageengine adselfservice plusCross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build...CVE-2014-37794.3 Medium
- zohocorp manageengine desktop centralThe NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to...CVE-2014-9371EPSS 19.1%10.0 High
- zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreMultiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx)...CVE-2014-7866Public exploitEPSS 79.8%7.5 High
- zohocorp manageengine password manager pro, manageengine it360 +1 moreSQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro ...CVE-2014-3997Public exploitEPSS 13.1%7.5 High
- zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreMultiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3...CVE-2014-7868Public exploitEPSS 73.3%7.5 High
- zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreSQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus...CVE-2014-7867EPSS 39.9%7.5 High
- zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreDirectory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager...CVE-2014-6036Public exploitEPSS 36.3%6.4 Medium
- zohocorp manageengine opmanagerDirectory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11...CVE-2014-6035Public exploitEPSS 28.8%7.5 High
- zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreDirectory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe...CVE-2014-6034Public exploitEPSS 79.0%5.0 Medium
- zohocorp manageengine netflow analyzer, manageengine it360 +1 moreDirectory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow...CVE-2014-5446Public exploitEPSS 54.7%5.0 Medium
- zohocorp manageengine netflow analyzer, manageengine it360 +1 moreMultiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6...CVE-2014-5445Public exploitEPSS 98.0%5.0 Medium
- zohocorp manageengine password manager proSQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP)...CVE-2014-8498Public exploitEPSS 12.7%6.5 Medium
- zohocorp manageengine eventlog analyzerDirectory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog...CVE-2014-6037Public exploitEPSS 84.2%7.5 High
- Show moreLoading…