Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp manageengine password manager proZoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability...CVE-2020-9347Disputed9.8 Critical
- zohocorp manageengine password manager proZoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site...CVE-2020-93468.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14590 and before allows a remote unauthenticated attacker...CVE-2019-197995.3 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted...CVE-2020-10541EPSS 10.1%9.8 Critical
- zohocorp manageengine desktop centralAn XML external entity (XXE) vulnerability iin Zoho ManageEngine Desktop Central before the 07...CVE-2020-8540EPSS 12.8%9.8 Critical
- zoho password manager pro (pmp), zohocorp manageengine password manager pro +1 moreIn ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402),...CVE-2016-11596.5 Medium
- zoho manageengine, zohocorp manageengine desktop central +1 moreZoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of...CVE-2020-10189In KEVPublic exploitEPSS 99.9%9.8 Critical
- zohocorp manageengine remote access plusAn issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the...CVE-2019-204744.3 Medium
- zohocorp manageengine applications manager, manageengine it360, manageengine opmanager +2 moreThe FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager...CVE-2014-7863Public exploitEPSS 83.4%7.5 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker...CVE-2019-198005.3 Medium
- zohocorp manageengine remote access plusAn authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine...CVE-2020-84224.3 Medium
- zohocorp manageengine desktop centralUnrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7...CVE-2013-7390Public exploitEPSS 74.5%9.8 Critical
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS.CVE-2020-68434.8 Medium
- zohocorp manageengine desktop central, manageengine desktop central managed service providers +1 moreDirectory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop...CVE-2014-5007Public exploitEPSS 37.3%9.8 Critical
- zohocorp manageengine eventlog analyzerManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure...CVE-2014-6039Public exploitEPSS 68.8%7.5 High
- zohocorp manageengine eventlog analyzerZoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information...CVE-2014-6038Public exploitEPSS 72.8%7.5 High
- zohocorp manageengine applications managerAn issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated...CVE-2019-194758.8 High
- zohocorp manageengine adselfservice plusAn issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed...CVE-2019-71629.1 Critical
- zohocorp manageengine adselfservice plusAn open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before...CVE-2019-187816.1 Medium
- zohocorp manageengine eventlog analyzerAn issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By...CVE-2019-19774Public exploitEPSS 12.5%8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection...CVE-2019-196499.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection...CVE-2019-196508.8 High
- zohocorp manageengine opmanager, manageengine firewall analyzer +1 moreIncorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager...CVE-2019-174217.8 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information...CVE-2019-184118.8 High
- zohocorp manageengine opmanagerAn issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The...CVE-2019-17602EPSS 81.1%9.8 Critical
- zohocorp manageengine datasecurity plusAn issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed...CVE-2019-171124.3 Medium
- zohocorp manageengine servicedesk plus** DISPUTED ** AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration...CVE-2019-15045Disputed5.3 Medium
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection...CVE-2019-15104Public exploit8.8 High
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL...CVE-2019-15105Public exploit8.8 High
- zohocorp manageengine opmanagerAn issue was discovered in Zoho ManageEngine OpManager through 12.4x. One can bypass the user...CVE-2019-15106Public exploitEPSS 25.5%9.8 Critical
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information...CVE-2019-150467.5 High
- zohocorp manageengine assetexplorerServer Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for...CVE-2019-129598.8 High
- zohocorp manageengine assetexplorerServer Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for...CVE-2019-129949.1 Critical
- zohocorp manageengine assetexplorerZoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE)...CVE-2019-146938.5 High
- zohocorp manageengine admanager plus, manageengine adselfservice plus, manageengine desktop central +2 moreZoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have...CVE-2019-128767.3 High
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do...CVE-2019-125376.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is...CVE-2019-125396.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the...CVE-2019-125406.1 Medium
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do...CVE-2019-125956.1 Medium
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do...CVE-2019-125966.1 Medium
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments...CVE-2019-125976.1 Medium
- zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 moreMultiple Zoho ManageEngine products suffer from local privilege escalation due to improper...CVE-2019-121337.8 High
- zohocorp manageengine adselfservice plusAn authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine...CVE-2019-12476Public exploit6.8 Medium
- zohocorp manageengine netflow analyzerA SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho...CVE-2019-12196EPSS 69.1%9.8 Critical
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12538Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12541Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN...CVE-2019-12542Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12543Public exploit6.1 Medium
- zohocorp manageengine adselfservice plusIn Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site...CVE-2019-83466.1 Medium
- zohocorp manageengine applications managerAn issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an...CVE-2017-115575.3 Medium
- Show moreLoading…