Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp manageengine sharepoint manager plusZoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because...CVE-2022-243069.8 Critical
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone....CVE-2022-23779Public exploitEPSS 13.2%5.3 Medium
- zohocorp manageengine key manager plusAn issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level...CVE-2022-244464.3 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any...CVE-2022-238636.5 Medium
- zohocorp manageengine servicedesk plusA Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine...CVE-2021-46065EPSS 92.3%4.8 Medium
- zohocorp manageengine desktop central, manageengine desktop central managed service providers +1 moreZoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9...CVE-2021-44757EPSS 24.2%9.1 Critical
- zohocorp manageengine o365 manager plusZoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file...CVE-2021-446527.8 High
- zohocorp log360, manageengine cloud security plus +1 moreZoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the...CVE-2021-446518.8 High
- zohocorp manageengine m365 manager plusZoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when...CVE-2021-446507.2 High
- zohocorp manageengine applications managerA vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build...CVE-2020-286798.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an...CVE-2021-461648.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file...CVE-2021-461657.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive...CVE-2021-461666.5 Medium
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain...CVE-2021-201484.3 Medium
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in...CVE-2021-201475.3 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin...CVE-2021-445269.8 Critical
- zohocorp manageengine pam360Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of...CVE-2021-445259.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated...CVE-2021-446759.8 Critical
- zohocorp manageengine access manager plusZoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g....CVE-2021-446769.8 Critical
- zoho desktop central, zohocorp manageengine desktop central +1 moreZoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code...CVE-2021-44515In KEVEPSS 99.9%9.8 Critical
- zohocorp manageengine opmanagerManageEngine's OpUtils 12.5.556 and prior allow access to a few audit directories without...CVE-2021-445149.8 Critical
- zohocorp manageengine m365 manager plusZoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.CVE-2021-420999.8 Critical
- zohocorp manageengine network configuration managerZoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection...CVE-2021-43319EPSS 21.4%9.8 Critical
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor.CVE-2021-432967.5 High
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts...CVE-2021-432956.1 Medium
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products...CVE-2021-432946.1 Medium
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and...CVE-2021-44077In KEVPublic exploitEPSS 93.5%9.8 Critical
- zohocorp manageengine remote access plusZoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by...CVE-2021-429557.3 High
- zohocorp manageengine remote access plusZoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by...CVE-2021-429547.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file...CVE-2021-420029.8 Critical
- zohocorp manageengine patch connect plusZoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code...CVE-2021-418339.8 Critical
- zohocorp manageengine network configuration managerZoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in...CVE-2021-41081Public exploitEPSS 64.1%9.8 Critical
- zohocorp manageengine network configuration managerZoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in...CVE-2021-410809.8 Critical
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary...CVE-2021-42847Public exploitEPSS 70.3%9.8 Critical
- zohocorp manageengine applications managerAn issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows...CVE-2020-247439.8 Critical
- zohocorp manageengine log360ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability...CVE-2021-20136EPSS 10.8%9.8 Critical
- zohocorp manageengine applications managerAn SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.CVE-2021-355126.5 Medium
- zohocorp manageengine opmanagerThe NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection...CVE-2021-410759.8 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support...CVE-2021-40493EPSS 50.2%9.8 Critical
- zohocorp manageengine admanager plusManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution...CVE-2021-20131EPSS 16.8%8.8 High
- zohocorp manageengine admanager plusManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution...CVE-2021-20130EPSS 32.5%8.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE.CVE-2021-382989.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite...CVE-2021-377629.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37919EPSS 11.0%9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37920EPSS 11.0%9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37921EPSS 11.0%9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37923EPSS 11.0%9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37924EPSS 11.0%9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which...CVE-2021-379225.3 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which...CVE-2021-37918EPSS 73.6%9.8 Critical
- Show moreLoading…