Skip to contentZohocorp vulnerabilities
Products
Show 18 moreShow less
Newest
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph...CVE-2023-493338.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.CVE-2023-493328.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports...CVE-2023-493318.3 High
- manageengine pam360, zohocorp manageengine pam360 +1 moreAuthorization vulnerability in PAM360CVE-2024-273128.1 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7251 allows SQL Injection while getting aggregate report...CVE-2023-493308.3 High
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreSQL InjectionCVE-2024-217758.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-02698.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL InjectionCVE-2024-02538.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.CVE-2023-487939.8 Critical
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export...CVE-2023-487929.8 Critical
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary...CVE-2023-507852.7 Low
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged...CVE-2023-499435.4 Medium
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreRemote code executionCVE-2024-02528.8 High
- manageengine opmanager, zohocorp manageengine opmanager, manageengine firewall analyzer +5 more +7 moreA directory traversal vulnerability exists in the uploadMib functionality of ManageEngine...CVE-2023-47211EPSS 47.0%9.1 Critical
- zoho forms form plugin for wordpress – zoho forms, zohocorp zoho forms +1 moreWordPress Zoho Forms Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-508916.5 Medium
- zohocorp manageengine recoverymanager plusZoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary...CVE-2023-48646EPSS 82.2%7.2 High
- manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 Medium
- manageengine desktop central, zohocorp manageengine desktop central +1 moreServer-Side Request Forgery in ManageEngine Desktop CentralCVE-2023-47696.6 Medium
- manageengine desktop central, zohocorp manageengine desktop central +1 moreImproper Neutralization of CRLF Sequences in ManageEngine Desktop CentralCVE-2023-47686.1 Medium
- manageengine desktop central, zohocorp manageengine desktop central +1 moreImproper Neutralization of CRLF Sequences in ManageEngine Desktop CentralCVE-2023-47676.1 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST...CVE-2023-419045.4 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the...CVE-2023-38743Public exploitEPSS 11.1%7.2 High
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass VulnerabilityCVE-2023-35719EPSS 24.6%6.8 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7202 allows admin users to download any file from the...CVE-2023-399124.9 Medium
- zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.CVE-2023-357858.1 High
- zohocorp manageengine admanager plusIncorrect access control in Zoho ManageEngine ADManager Plus Build 7180 allows unauthenticated...CVE-2023-314926.5 Medium
- zohocorp manageengine password manager proCross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password...CVE-2020-274496.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.CVE-2023-383336.1 Medium
- zohocorp manageengine adaudit plusThe event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass...CVE-2023-32783Disputed7.5 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user...CVE-2023-383326.5 Medium
- zohocorp manageengine network configuration managerAn issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The...CVE-2023-295054.3 Medium
- zohocorp manageengine supportcenter plusZoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products...CVE-2023-383315.4 Medium
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.CVE-2023-373085.4 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...CVE-2023-341975.4 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view...CVE-2023-357864.9 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be...CVE-2023-35854Public exploitDisputed9.8 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code...CVE-2023-31099EPSS 81.6%8.8 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104 allows admin users to conduct an XXE attack.CVE-2023-294434.9 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16390 allows DOM XSS.CVE-2023-294426.1 Medium
- zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 moreStatic credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP)...CVE-2023-22917.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7180 allows for authenticated users to exploit command...CVE-2023-29084Public exploitEPSS 98.0%7.2 High
- zohocorp manageengine applications managerStored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through...CVE-2023-28341EPSS 98.7%6.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack.CVE-2023-283406.5 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service...CVE-2023-28342EPSS 78.3%7.5 High
- manageengine opmanager, zohocorp manageengine opmanager, manageengine opmanager msp +1 more +3 moreA blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of...CVE-2022-43473EPSS 19.8%5.8 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that...CVE-2022-364139.1 Critical
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus...CVE-2023-26601EPSS 34.1%7.5 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center...CVE-2023-266006.5 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory...CVE-2022-483628.8 High
- zohocorp zoho forms, unknown form plugin for wordpress +1 moreZoho Forms < 3.0.1 - Contributor+ Stored XSSCVE-2023-01695.4 Medium
- Show moreLoading…