Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment...CVE-2023-230786.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment...CVE-2023-230776.1 Medium
- zohocorp manageengine supportcenter plusOS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating...CVE-2023-23076EPSS 74.3%9.8 Critical
- zohocorp manageengine assetexplorerCross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when...CVE-2023-230756.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding...CVE-2023-23074EPSS 83.6%6.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the...CVE-2023-230736.1 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP through 13003 is vulnerable to authentication bypass due...CVE-2023-229649.1 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 Critical
- zohocorp manageengine exchange reporter plusZoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.CVE-2023-226247.5 High
- zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 moreZoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360...CVE-2022-47523EPSS 70.6%9.8 Critical
- zohocorp manageengine device control plusAn issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus...CVE-2022-47578Disputed7.1 High
- zohocorp manageengine device control plusAn issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus...CVE-2022-47577Disputed7.1 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass...CVE-2022-407726.5 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External...CVE-2022-407714.9 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated...CVE-2022-40770EPSS 81.3%7.2 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the...CVE-2022-42904EPSS 83.1%7.2 High
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the...CVE-2022-429033.3 Low
- zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 moreZoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus...CVE-2022-43672EPSS 67.6%9.8 Critical
- zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 moreZoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus...CVE-2022-43671EPSS 75.2%9.8 Critical
- zohocorp manageengine mobile device manager plusIn Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration...CVE-2022-413397.8 High
- zohocorp manageengine servicedesk plus msp, manageengine supportcenter plus +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are...CVE-2022-407738.8 High
- zohocorp zoho crm lead magnet, zoho crm lead magnet (wordpress plugin) +1 moreWordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerabilityCVE-2022-419788.8 High
- zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 moreZoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before...CVE-2022-40300EPSS 99.1%9.8 Critical
- zohocorp manageengine opmanager, manageengine netflow analyzer, manageengine network configuration manager +3 more +5 moreZoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,...CVE-2022-38772EPSS 78.0%8.8 High
- zohocorp manageengine analytics plusDirectory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho...CVE-2020-216429.8 Critical
- zohocorp manageengine analytics plusOut-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus...CVE-2020-216417.5 High
- zohocorp manageengine opmanager, manageengine firewall analyzer, manageengine netflow analyzer +4 more +6 moreZoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,...CVE-2022-369237.5 High
- zohocorp manageengine opmanager, manageengine firewall analyzer, manageengine netflow analyzer +4 more +6 moreZoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,...CVE-2022-37024EPSS 80.0%8.8 High
- zohocorp manageengine supportcenter plusIn Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to...CVE-2022-364129.8 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine password manager pro +1 more +3 moreZoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to...CVE-2022-35405In KEVPublic exploitEPSS 99.9%9.8 Critical
- zohocorp manageengine firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +1 more +3 moreManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable...CVE-2022-354048.2 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...CVE-2022-354037.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart)...CVE-2022-348297.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from...CVE-2022-325517.5 High
- zohocorp manageengine applications managerManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL...CVE-2022-230507.2 High
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus v6.1 allows attackers to perform username enumeration via a...CVE-2022-28987EPSS 10.0%5.3 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.CVE-2022-29535EPSS 91.8%9.8 Critical
- zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 moreZoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360...CVE-2022-29081EPSS 83.5%9.8 Critical
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine admanager plus +1 more +3 moreZoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701,...CVE-2022-29457Public exploit8.8 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote...CVE-2022-28810In KEVPublic exploitEPSS 71.0%6.8 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL...CVE-2022-27908EPSS 36.5%8.8 High
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain...CVE-2022-266535.3 Medium
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.CVE-2022-267775.3 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the...CVE-2022-246816.1 Medium
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that...CVE-2022-28219Public exploitEPSS 97.2%9.8 Critical
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.CVE-2022-253735.4 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 13001 allows anyone to know the organisation's default...CVE-2022-252455.3 Medium
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on...CVE-2022-249788.8 High
- zohocorp manageengine key manager plusAn issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by...CVE-2022-244476.5 Medium
- zohocorp manageengine sharepoint manager plusZoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that...CVE-2022-243059.8 Critical
- Show moreLoading…