Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp manageengine opmanagerAn issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json...CVE-2017-115597.5 High
- zohocorp manageengine opmanagerAn issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the...CVE-2017-115605.4 Medium
- zohocorp manageengine opmanagerAn issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any...CVE-2017-115616.5 Medium
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, the 'haid' parameter of the '...CVE-2017-117388.1 High
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with...CVE-2017-117396.1 Medium
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the...CVE-2017-117408.8 High
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN...CVE-2019-12189Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusIn Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can...CVE-2019-12252Public exploit6.5 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...CVE-2019-8929Public exploitEPSS 11.2%6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...CVE-2019-8928Public exploit6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...CVE-2019-8927Public exploit6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...CVE-2019-8926Public exploit6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute...CVE-2019-8925Public exploitEPSS 11.6%4.3 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...CVE-2019-74276.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...CVE-2019-74266.1 Medium
- zohocorp manageengine firewall analyzerThe "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is...CVE-2019-116789.8 Critical
- zohocorp manageengine firewall analyzerThe Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224...CVE-2019-116779.8 Critical
- zohocorp manageengine firewall analyzerThe user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is...CVE-2019-116766.1 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a...CVE-2018-19374Public exploit7.0 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.CVE-2019-115116.1 Medium
- zohocorp servicedesk plusZoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an...CVE-2019-10008Public exploitEPSS 19.4%8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid...CVE-2019-11469Public exploitEPSS 17.0%9.8 Critical
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An...CVE-2019-11448Public exploitEPSS 12.4%9.8 Critical
- zohocorp manageengine servicedesk plusInformation leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3...CVE-2019-10273Public exploit4.3 Medium
- zohocorp manageengine servicedesk plusManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items...CVE-2017-93628.8 High
- zohocorp manageengine servicedesk plusManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the...CVE-2017-93766.5 Medium
- zohocorp manageengine adselfservice plusAn issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...CVE-2019-71617.5 High
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...CVE-2019-74256.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...CVE-2019-74246.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...CVE-2019-74236.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...CVE-2019-74226.1 Medium
- zohocorp manageengine servicedesk plusAn Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk...CVE-2019-83959.8 Critical
- zoho manageengine, zohocorp manageengine servicedesk plus +1 moreZoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to...CVE-2019-8394In KEVPublic exploitEPSS 63.3%6.5 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.CVE-2019-390510.0 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.CVE-2018-206649.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.CVE-2018-20485Public exploit6.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout...CVE-2018-20484Public exploit6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms...CVE-2018-203396.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.CVE-2018-20338EPSS 11.5%9.8 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.CVE-2018-20173EPSS 24.5%9.8 Critical
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of...CVE-2018-191187.5 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.CVE-2018-199216.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.CVE-2018-187166.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123219 has stored XSS.CVE-2018-187156.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.CVE-2018-192886.1 Medium
- zohocorp manageengine network configuration manager, manageengine opmanager +1 moreAn XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network...CVE-2018-18980EPSS 25.0%7.5 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.CVE-2018-18949EPSS 24.5%9.8 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.CVE-2018-18475EPSS 20.4%9.8 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before build 123214 has XSS.CVE-2018-182626.1 Medium
- zohocorp manageengine assetexplorerIn Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0...CVE-2018-175966.1 Medium
- Show moreLoading…