Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

manageengine vulnerability manager plus vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-47966
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsib...
Zohocorp Manageengine Access Manager Plus 4.3Zohocorp Manageengine Access Manager PlusZohocorp Manageengine Ad360Zohocorp Manageengine Ad360 4.3Zohocorp Manageengine Adaudit Plus 7.0Zohocorp Manageengine Adaudit PlusZohocorp Manageengine Admanager Plus 7.1Zohocorp Manageengine Admanager PlusZohocorp Manageengine Adselfservice Plus 6.2Zohocorp Manageengine Adselfservice PlusZohocorp Manageengine Analytics PlusZohocorp Manageengine Analytics Plus 5.1Zohocorp Manageengine Assetexplorer 6.9Zohocorp Manageengine AssetexplorerZohocorp Manageengine Key Manager PlusZohocorp Manageengine Key Manager Plus 6.4Zohocorp Manageengine Pam360 5.7Zohocorp Manageengine Pam360Zohocorp Manageengine Password Manager ProZohocorp Manageengine Password Manager Pro 12.1Zohocorp Manageengine Servicedesk PlusZohocorp Manageengine Servicedesk Plus 14.0
7.2
CVSSv2
CVE-2019-12133
Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associated with said products try to execute binaries such as sc.exe from the current di...
Zohocorp Manageengine Mobile Device Manager Plus 9.0.0Zohocorp Manageengine Patch Connect Plus 9.0.0Zohocorp Manageengine Vulnerability Manager Plus 9.0.0Zohocorp Manageengine Patch Manager Plus 9.0.0Zohocorp Manageengine Browser Security Plus -Zohocorp Manageengine Eventlog Analyzer 12.0.2Zohocorp Manageengine Supportcenter Plus 8.1Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Oputils 11.0Zohocorp Manageengine Desktop Central 10.0.380Zohocorp Manageengine Firewall 12.0Zohocorp Manageengine Key Manager Plus 5.6Zohocorp Manageengine Password Manager Pro 9.9Zohocorp Manageengine Analytics Plus 1.0Zohocorp Manageengine Servicedesk Plus 10.0.0Zohocorp Manageengine O365 Manager Plus 4.0Zohocorp Manageengine Netflow Analyzer 11.0Zohocorp Manageengine Network Configuration Manager 11.0
NA
CVE-2023-6105
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt prod...
Zohocorp Manageengine Mobile Device Manager Plus 10.1.2207.4Zohocorp Manageengine AppcreatorZohocorp Manageengine Analytics PlusZohocorp Manageengine Endpoint Central MspZohocorp Manageengine Endpoint CentralZohocorp Manageengine Remote Monitoring And ManagementZohocorp Manageengine Os DeployerZohocorp Manageengine Remote Access PlusZohocorp Manageengine Mobile Device Manager PlusZohocorp Manageengine Application Control PlusZohocorp Manageengine Vulnerability Manager PlusZohocorp Manageengine Browser Security PlusZohocorp Manageengine Patch Manager PlusZohocorp Manageengine Device Control PlusZohocorp Manageengine Endpoint Dlp PlusZohocorp Manageengine Adselfservice Plus 6.3Zohocorp Manageengine Adselfservice PlusZohocorp Manageengine Admanager PlusZohocorp Manageengine Admanager Plus 7.2Zohocorp Manageengine Adaudit Plus 7.2Zohocorp Manageengine Adaudit PlusZohocorp Manageengine Cloud Security Plus 4.1
NA
CVE-2023-35785
Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and be...
Zohocorp Manageengine Ad360Zohocorp Manageengine Ad360 4.3Zohocorp Manageengine Adaudit Plus 7.2Zohocorp Manageengine Adaudit PlusZohocorp Manageengine Admanager PlusZohocorp Manageengine Admanager Plus 7.2Zohocorp Manageengine Assetexplorer 6.9Zohocorp Manageengine AssetexplorerZohocorp Manageengine Assetexplorer 7.0Zohocorp Manageengine Cloud Security Plus 4.1Zohocorp Manageengine Cloud Security PlusZohocorp Manageengine Datasecurity Plus 6.1Zohocorp Manageengine Datasecurity PlusZohocorp Manageengine Eventlog Analyzer 12.3.0Zohocorp Manageengine Eventlog AnalyzerZohocorp Manageengine Exchange Reporter Plus 5.7Zohocorp Manageengine Exchange Reporter PlusZohocorp Manageengine Log360Zohocorp Manageengine Log360 5.3Zohocorp Manageengine Log360 Ueba 4.0Zohocorp Manageengine M365 Manager Plus 4.5Zohocorp Manageengine M365 Manager Plus
NA
CVE-2022-35405
Zoho ManageEngine Password Manager Pro prior to 12101 and PAM360 prior to 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus prior to 4303 with authentication.)
Zohocorp Manageengine Access Manager Plus 4.3Zohocorp Manageengine Access Manager PlusZohocorp Manageengine Password Manager ProZohocorp Manageengine Password Manager Pro 12.1Zohocorp Manageengine Pam360Zohocorp Manageengine Pam360 5.5
3.5
CVSSv2
CVE-2018-9163
A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus prior to 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do.
Zohocorp Manageengine Recovery Manager Plus
NA
CVE-2023-48646
Zoho ManageEngine RecoveryManager Plus prior to 6070 allows admin users to execute arbitrary commands via proxy settings.
Zohocorp Manageengine Recoverymanager PlusZohocorp Manageengine Recoverymanager Plus 6.0
NA
CVE-2023-47211
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.7Zohocorp Manageengine OputilsZohocorp Manageengine Oputils 12.7Zohocorp Manageengine Firewall Analyzer 12.7Zohocorp Manageengine Firewall AnalyzerZohocorp Manageengine Netflow Analyzer 12.7Zohocorp Manageengine Netflow AnalyzerZohocorp Manageengine Network Configuration Manager 12.7Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Opmanager Msp 12.7Zohocorp Manageengine Opmanager MspZohocorp Manageengine Opmanager Plus 12.7Zohocorp Manageengine Opmanager Plus
4.3
CVSSv2
CVE-2015-1026
Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus prior to 6.2 Build 6270 allow remote malicious users to inject arbitrary web script or HTML via the (1) technicianSearchText parameter to the Help Desk Technician page or (2) rolesSearchText p...
Zohocorp Manageengine Admanager Plus
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook