Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zoho manageengine servicedesk plusIncomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows...CVE-2021-20081EPSS 52.4%7.2 High
- zohocorp manageengine key manager plusZoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page...CVE-2021-283825.4 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#...CVE-2021-279566.1 Medium
- zohocorp manageengine eventlog analyzerZoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory...CVE-2021-28959EPSS 16.9%9.8 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a...CVE-2021-3287Public exploitEPSS 51.3%9.8 Critical
- zoho manageengine servicedesk plusInsufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and...CVE-2021-20080EPSS 93.1%6.1 Medium
- zohocorp manageengine opmanagerManage Engine OpManager builds below 125346 are vulnerable to a remote denial of service...CVE-2021-20078EPSS 59.5%9.1 Critical
- zohocorp manageengine desktop centralThe MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to...CVE-2020-93677.8 High
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML...CVE-2020-35682Public exploit8.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret...CVE-2020-280509.1 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7066 allows XSS.CVE-2020-355946.1 Medium
- zohocorp manageengine applications control plusZoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration...CVE-2020-296589.8 Critical
- zohocorp manageengine adselfservice plusA Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho...CVE-2021-272146.1 Medium
- zohocorp manageengine applications managerdoFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications...CVE-2020-35765EPSS 27.3%8.8 High
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on...CVE-2019-162684.8 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows...CVE-2020-28653Public exploitEPSS 77.9%9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL...CVE-2020-277338.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a...CVE-2019-169625.4 Medium
- zohocorp manageengine applications managerSQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to...CVE-2020-279959.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker...CVE-2020-108167.5 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL...CVE-2020-16267EPSS 41.1%8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL...CVE-2020-15927EPSS 41.1%8.8 High
- zohocorp manageengine desktop central, manageengine remote access plus +1 moreA design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and...CVE-2020-155898.1 High
- zohocorp manageengine desktop centralAn issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An...CVE-2020-24397EPSS 15.4%7.2 High
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and...CVE-2020-155339.8 Critical
- zohocorp manageengine adselfservice plusThe custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows...CVE-2018-5353Public exploitEPSS 11.1%9.8 Critical
- zohocorp manageengine application control plusAn SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail...CVE-2020-155944.3 Medium
- zohocorp manageengine application control plusAn issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element...CVE-2020-155954.3 Medium
- zohocorp manageengine applications managerThe REST API in Zoho ManageEngine Applications Manager before build 14740 allows an...CVE-2020-15394Public exploit9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header...CVE-2020-155216.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to...CVE-2020-14008Public exploitEPSS 39.6%7.2 High
- zohocorp manageengine exchange reporter plus, manageengine ad360, manageengine adaudit plus +8 more +10 moreAn issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510,...CVE-2020-24786EPSS 12.8%9.8 Critical
- zohocorp manageengine adselfservice plusAn elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build...CVE-2020-115529.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in the client side of Zoho ManageEngine Desktop Central before 10.0.533....CVE-2020-15588EPSS 12.7%9.8 Critical
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated...CVE-2020-140487.5 High
- zohocorp manageengine opmanagerIn Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal...CVE-2020-13818EPSS 37.8%7.5 High
- zohocorp manageengine servicedesk plusZoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users...CVE-2020-131546.5 Medium
- zohocorp manageengine servicedesk plusDefault installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to...CVE-2019-15083Public exploit6.1 Medium
- zohocorp manageengine datasecurity plus, manageengine adaudit plus +1 moreZoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate...CVE-2020-11532EPSS 77.5%9.8 Critical
- zohocorp manageengine datasecurity plus, manageengine adaudit plus +1 moreThe DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1...CVE-2020-11531EPSS 13.7%8.8 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an...CVE-2020-12116Public exploitEPSS 97.4%7.5 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes...CVE-2020-108596.5 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key...CVE-2020-11946EPSS 51.8%7.5 High
- zohocorp manageengine opmanagerIn Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a...CVE-2020-115277.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.CVE-2020-11518EPSS 19.2%9.8 Critical
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central allows unauthenticated users to access PDFGenerationServlet,...CVE-2020-8509EPSS 10.6%7.5 High
- zohocorp manageengine assetexplorerZoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager ...CVE-2019-190347.2 High
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows...CVE-2020-88386.4 Medium
- zohocorp manageengine desktop centralManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on...CVE-2019-155106.1 Medium
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly,...CVE-2019-113618.8 High
- Show moreLoading…