Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
manageengine applications manager 12.0 vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2016-9488
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users'...
Manageengine Applications Manager 12.0
Manageengine Applications Manager 13.0
6.1
CVSSv3
CVE-2016-9490
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability. Applications Manager is prone to a Cross-Site Scripting vulnerability in parameter LIMIT, in URL path /DiagAlertAction.do?REQTYPE=AJAX&LIMIT=123...
Manageengine Applications Manager 13.0
Manageengine Applications Manager 12.0
8.8
CVSSv3
CVE-2016-9489
In ManageEngine Applications Manager 12 and 13 before build 13200, an authenticated user is able to alter all of their own properties, including own group, i.e. changing their group to one with higher privileges like "ADMIN". A user is also able to change properties of ...
Zohocorp Manageengine Applications Manager 12.0
Zohocorp Manageengine Applications Manager 13.0
4.9
CVSSv3
CVE-2016-9491
ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /register.do page (most likely limited to administrator), to browse the filesystem and read the system files, including Applications Manager configuration, stored pr...
Zohocorp Manageengine Applications Manager 12.0
Zohocorp Manageengine Applications Manager 13.0
9.8
CVSSv3
CVE-2016-9498
ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulnerability can be exploited by remote user without authentication and it allows to execute remote code compromising the application as well as the operating syste...
Zohocorp Manageengine Applications Manager 13.0
Zohocorp Manageengine Applications Manager 12.0
8.8
CVSSv3
CVE-2020-28679
A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated malicious users to execute a SQL injection via a crafted request.
Zohocorp Manageengine Applications Manager 11.0
Zohocorp Manageengine Applications Manager 11.1
Zohocorp Manageengine Applications Manager 11.2
Zohocorp Manageengine Applications Manager 11.3
Zohocorp Manageengine Applications Manager 11.4
Zohocorp Manageengine Applications Manager 11.5
Zohocorp Manageengine Applications Manager 11.6
Zohocorp Manageengine Applications Manager 11.7
Zohocorp Manageengine Applications Manager 11.8
Zohocorp Manageengine Applications Manager 11.9
Zohocorp Manageengine Applications Manager 12.0
Zohocorp Manageengine Applications Manager 12.1
Zohocorp Manageengine Applications Manager 12.2
Zohocorp Manageengine Applications Manager 12.3
Zohocorp Manageengine Applications Manager 12.5
Zohocorp Manageengine Applications Manager 12.6
Zohocorp Manageengine Applications Manager 12.7
Zohocorp Manageengine Applications Manager 12.8
Zohocorp Manageengine Applications Manager 12.9
Zohocorp Manageengine Applications Manager 13.0
Zohocorp Manageengine Applications Manager 13.1
Zohocorp Manageengine Applications Manager 13.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started