Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

manageengine it360 - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-6036
Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and previous versions, Social IT Plus 11.0, and IT360 10.3, 10.4, and previous versions allows remote attackers or remote authenticated users to delete arbitrary files via a .. (...
Zohocorp Manageengine OpmanagerZohocorp Manageengine It360Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Social It Plus 11.0
NA
CVE-2014-7867
SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allows remote attackers or remote authenticated users to execute arbitrary SQL command...
Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine It360 10.4
NA
CVE-2014-7868
Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the A...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine It360 10.4Zohocorp Manageengine It360 10.3.0
8.8
CVSSv3
CVE-2014-5302
Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code.
Manageengine Servicedesk Plus -Manageengine Assetexplorer -Manageengine Supportcenter -Manageengine It360 -
8.8
CVSSv3
CVE-2014-5301
Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.
Manageengine Servicedesk Plus -Manageengine Assetexplorer -Manageengine Supportcenter -Manageengine It360 -
NA
CVE-2014-3996
SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition prior to 9 build 90043, Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition pri...
Manageengine It360Manageengine Password Manager ProManageengine Desktop Central
7.5
CVSSv3
CVE-2014-7863
The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager prior to 11.9 build 11912, OpManager 8 up to and including 11.5 build 11400, and IT360 10.5 and previous versions does not properly restrict access, which allows remote attackers and rem...
Zohocorp Manageengine Applications ManagerZohocorp Manageengine It360Zohocorp Manageengine Opmanager
NA
CVE-2014-5445
Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 up to and including 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet o...
Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Netflow Analyzer
NA
CVE-2014-7866
Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) up to and including 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. (dot dot) in the (1...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360 10.4Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.4Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 10.0Zohocorp Manageengine Opmanager 10.1
NA
CVE-2014-6034
Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 up to and including 11.3, Social IT Plus 11.0, and IT360 10.4 and previous versions allows remote attackers or remote authenticat...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.0Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 10.1Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook