Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-379319.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-379309.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-379299.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-379289.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37926EPSS 73.6%9.8 Critical
- zoho crm lead magnet, zohocorp zoho crm lead magnet +1 moreA Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s...CVE-2021-338495.4 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the...CVE-2021-41288EPSS 79.6%9.8 Critical
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only...CVE-2021-418277.5 High
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with...CVE-2021-418287.5 High
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number...CVE-2021-418297.5 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload...CVE-2021-377619.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to...CVE-2021-37539EPSS 92.9%9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.CVE-2021-379279.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection...CVE-2021-37925EPSS 10.5%9.8 Critical
- zohocorp manageengine admanager plusManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities.CVE-2021-377418.8 High
- zohocorp manageengine admanager plusManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.CVE-2021-374197.5 High
- zohocorp manageengine admanager plusManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.CVE-2021-374206.5 Medium
- zohocorp manageengine admanager plusManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.CVE-2021-374249.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking...CVE-2021-374229.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.CVE-2021-374239.8 Critical
- zohocorp manageengine desktop centralZoho ManageEngine DesktopCentral version 10.1.2119.7 and prior allows anyone to get a valid user...CVE-2021-374147.5 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API...CVE-2021-40539In KEVPublic exploitEPSS 99.0%9.8 Critical
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 moreZoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that...CVE-2021-37415In KEVEPSS 99.8%9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access...CVE-2021-374219.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper...CVE-2021-374179.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the...CVE-2021-374166.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in...CVE-2021-33055EPSS 18.1%9.8 Critical
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.CVE-2021-401728.8 High
- zohocorp manageengine cloud security plusZoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy...CVE-2021-401738.8 High
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security...CVE-2021-401748.8 High
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote...CVE-2021-401759.8 Critical
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5225 allows stored XSS.CVE-2021-401766.1 Medium
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.CVE-2021-401779.8 Critical
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the...CVE-2021-401786.1 Medium
- zohocorp manageengine adselfservice plusA CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1...CVE-2021-33256DisputedEPSS 79.0%8.8 High
- zohocorp manageengine password manager proZoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp...CVE-2021-336175.3 Medium
- zohocorp manageengine assetexplorerDue to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker...CVE-2021-201109.8 Critical
- zohocorp manageengine assetexplorerManage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS...CVE-2021-201087.5 High
- zohocorp manageengine assetexplorerDue to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can...CVE-2021-201097.5 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7110 allows remote code execution.CVE-2021-339119.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7110 allows reflected XSS.CVE-2021-367716.1 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7110 allows stored XSS.CVE-2021-367726.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain...CVE-2021-318745.9 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing...CVE-2021-31813EPSS 78.3%5.4 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery ...CVE-2021-315319.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.CVE-2021-315307.5 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.CVE-2021-311607.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code...CVE-2021-28958EPSS 73.1%9.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due...CVE-2021-31159Public exploitEPSS 17.8%5.3 Medium
- zohocorp manageengine password manager proIn Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve...CVE-2021-318575.9 Medium
- Show moreLoading…