Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp manageengine applications managerA serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows...CVE-2018-16364EPSS 17.9%8.1 High
- zohocorp manageengine supportcenter plusIn Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored...CVE-2018-169656.1 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to...CVE-2018-16833EPSS 65.4%6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for ...CVE-2018-17283EPSS 66.3%7.5 High
- zohocorp manageengine opmanagerGlobal Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.CVE-2018-17243EPSS 75.5%9.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10...CVE-2018-134127.8 High
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company...CVE-2018-134118.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles"...CVE-2018-15740Public exploit6.1 Medium
- zohocorp manageengine applications managerA reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13...CVE-2018-151696.1 Medium
- zohocorp manageengine applications managerA SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before...CVE-2018-151689.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access...CVE-2018-117179.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is...CVE-2018-11716EPSS 14.3%9.8 Critical
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objectsCVE-2016-9498EPSS 21.2%9.8 Critical
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entityCVE-2016-94914.9 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypassCVE-2016-94898.8 High
- zohocorp manageengine eventlog analyzerAn issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting...CVE-2018-100766.1 Medium
- zohocorp manageengine eventlog analyzerCross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows...CVE-2018-100756.1 Medium
- zohocorp manageengine applications managerA SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build...CVE-2018-13050EPSS 39.3%9.8 Critical
- zohocorp manageengine desktop centralIncorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255...CVE-2018-129997.5 High
- zohocorp firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +2 more +4 moreA reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before...CVE-2018-12998EPSS 99.2%6.1 Medium
- zohocorp firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +2 more +4 moreIncorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before...CVE-2018-129977.5 High
- zohocorp manageengine applications managerA reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager...CVE-2018-129966.1 Medium
- zohocorp manageengine applications managerIncorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager...CVE-2018-118089.1 Critical
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection.CVE-2018-10466EPSS 16.6%9.8 Critical
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3 Build 9317. Unauthenticated...CVE-2018-72485.3 Medium
- zohocorp manageengine netflow analyzerCross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho...CVE-2018-108036.1 Medium
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: network...CVE-2018-53427.2 High
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing...CVE-2018-53419.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database...CVE-2018-53407.2 High
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: insufficient...CVE-2018-53399.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing...CVE-2018-53389.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory...CVE-2018-53379.8 Critical
- zohocorp manageengine recovery manager plusA stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus...CVE-2018-9163Public exploit5.4 Medium
- zohocorp manageengine servicedesk plusIn Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run...CVE-2018-57996.1 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were...CVE-2018-87226.1 Medium
- zohocorp manageengine eventlog analyzerZoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2...CVE-2018-87216.1 Medium
- zohocorp manageengine eventlog analyzerCross-site scripting (XSS) in Zoho ManageEngine EventLog Analyzer before 11.12 Build 11120 allows...CVE-2018-74056.1 Medium
- zohocorp manageengine applications managerA remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13...CVE-2018-7890Public exploitEPSS 78.8%9.8 Critical
- zohocorp manageengine desktop centralRemote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10...CVE-2017-169249.8 Critical
- zohocorp manageengine admanager plus/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL...CVE-2017-175528.8 High
- zohocorp desktop centralThe DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build...CVE-2014-7862Public exploitEPSS 81.0%9.8 Critical
- zohocorp manageengine password manager proZoho ManageEngine Password Manager Pro 9 before 9.4 (9400) has reflected XSS in SearchResult.ec...CVE-2017-176986.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage...CVE-2017-16851EPSS 16.6%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...CVE-2017-16850EPSS 16.6%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage...CVE-2017-16849EPSS 16.6%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do...CVE-2017-16848EPSS 15.1%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...CVE-2017-16847EPSS 16.6%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...CVE-2017-16846EPSS 16.6%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via...CVE-2017-16543Public exploit9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL...CVE-2017-16542Public exploit8.8 High
- Show moreLoading…