Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine log360 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2021-20136
ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled data...
Zohocorp Manageengine Log360 5.3Zohocorp Manageengine Log360
8.8
CVSSv3
CVE-2021-40172
Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.
Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.2
8.8
CVSSv3
CVE-2021-40174
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.
Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.2
9.8
CVSSv3
CVE-2021-40175
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.
Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.2
6.1
CVSSv3
CVE-2021-40176
Zoho ManageEngine Log360 before Build 5225 allows stored XSS.
Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.2
9.8
CVSSv3
CVE-2021-40177
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.
Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.2
6.1
CVSSv3
CVE-2021-40178
Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.
Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.2
8.8
CVSSv3
CVE-2021-44651
Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.
Zohocorp Manageengine Cloud Security PlusZohocorp Manageengine Cloud Security Plus 4.1Zohocorp Log360
8.1
CVSSv3
CVE-2023-35785
Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and be...
Zohocorp Manageengine Ad360Zohocorp Manageengine Ad360 4.3Zohocorp Manageengine Adaudit Plus 7.2Zohocorp Manageengine Adaudit PlusZohocorp Manageengine Admanager PlusZohocorp Manageengine Admanager Plus 7.2Zohocorp Manageengine Assetexplorer 6.9Zohocorp Manageengine AssetexplorerZohocorp Manageengine Assetexplorer 7.0Zohocorp Manageengine Cloud Security Plus 4.1Zohocorp Manageengine Cloud Security PlusZohocorp Manageengine Datasecurity Plus 6.1Zohocorp Manageengine Datasecurity PlusZohocorp Manageengine Eventlog Analyzer 12.3.0Zohocorp Manageengine Eventlog AnalyzerZohocorp Manageengine Exchange Reporter Plus 5.7Zohocorp Manageengine Exchange Reporter PlusZohocorp Manageengine Log360Zohocorp Manageengine Log360 5.3Zohocorp Manageengine Log360 Ueba 4.0Zohocorp Manageengine M365 Manager Plus 4.5Zohocorp Manageengine M365 Manager Plus
9.8
CVSSv3
CVE-2020-24786
An issue exists in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before bu...
Zohocorp Manageengine Adselfservice Plus 5.8Zohocorp Manageengine Adselfservice PlusZohocorp Manageengine Exchange Reporter PlusZohocorp Manageengine Exchange Reporter Plus 5.5Zohocorp Manageengine Ad360Zohocorp Manageengine Ad360 4.2Zohocorp Manageengine Datasecurity PlusZohocorp Manageengine Datasecurity Plus 6.0Zohocorp Manageengine Recovermanager PlusZohocorp Manageengine Recovermanager Plus 6.0Zohocorp Manageengine Eventlog Analyzer 12.1.3Zohocorp Manageengine Eventlog AnalyzerZohocorp Manageengine Adaudit PlusZohocorp Manageengine Adaudit Plus 6.0Zohocorp Manageengine O365 Manager Plus 4.3Zohocorp Manageengine O365 Manager PlusZohocorp Manageengine Cloud Security PlusZohocorp Manageengine Cloud Security Plus 4.1Zohocorp Manageengine Admanager PlusZohocorp Manageengine Admanager Plus 7.0Zohocorp Manageengine Log360Zohocorp Manageengine Log360 5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook