manageengine patch connect plus vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Zoho ManageEngine Patch Connect Plus prior to 90099 is vulnerable to unauthenticated remote code execution.

Zohocorp Manageengine Patch Connect Plus Zohocorp Manageengine Patch Connect Plus 9.0.0

7.2

CVSSv2

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associated with said products try to execute binaries such as sc.exe from the current di...

Zohocorp Manageengine Mobile Device Manager Plus 9.0.0 Zohocorp Manageengine Patch Connect Plus 9.0.0 Zohocorp Manageengine Vulnerability Manager Plus 9.0.0 Zohocorp Manageengine Patch Manager Plus 9.0.0 Zohocorp Manageengine Browser Security Plus -Zohocorp Manageengine Eventlog Analyzer 12.0.2 Zohocorp Manageengine Supportcenter Plus 8.1 Zohocorp Manageengine Opmanager 12.3 Zohocorp Manageengine Oputils 11.0 Zohocorp Manageengine Desktop Central 10.0.380 Zohocorp Manageengine Firewall 12.0 Zohocorp Manageengine Key Manager Plus 5.6 Zohocorp Manageengine Password Manager Pro 9.9 Zohocorp Manageengine Analytics Plus 1.0 Zohocorp Manageengine Servicedesk Plus 10.0.0 Zohocorp Manageengine O365 Manager Plus 4.0 Zohocorp Manageengine Netflow Analyzer 11.0 Zohocorp Manageengine Network Configuration Manager 11.0

NA

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt prod...

Zohocorp Manageengine Mobile Device Manager Plus 10.1.2207.4 Zohocorp Manageengine Appcreator Zohocorp Manageengine Analytics Plus Zohocorp Manageengine Endpoint Central Msp Zohocorp Manageengine Endpoint Central Zohocorp Manageengine Remote Monitoring And Management Zohocorp Manageengine Os Deployer Zohocorp Manageengine Remote Access Plus Zohocorp Manageengine Mobile Device Manager Plus Zohocorp Manageengine Application Control Plus Zohocorp Manageengine Vulnerability Manager Plus Zohocorp Manageengine Browser Security Plus Zohocorp Manageengine Patch Manager Plus Zohocorp Manageengine Device Control Plus Zohocorp Manageengine Endpoint Dlp Plus Zohocorp Manageengine Adselfservice Plus 6.3 Zohocorp Manageengine Adselfservice Plus Zohocorp Manageengine Admanager Plus Zohocorp Manageengine Admanager Plus 7.2 Zohocorp Manageengine Adaudit Plus 7.2 Zohocorp Manageengine Adaudit Plus Zohocorp Manageengine Cloud Security Plus 4.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook