Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine netflow analyzer - vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2014-5446
Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 up to and including 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.
Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Netflow Analyzer 9.1Zohocorp Manageengine Netflow Analyzer 9.5Zohocorp Manageengine Netflow Analyzer 9.9Zohocorp Manageengine Netflow Analyzer 10.0Zohocorp Manageengine Netflow Analyzer 9.6Zohocorp Manageengine Netflow Analyzer 9.7Zohocorp Manageengine Netflow Analyzer 10.2Zohocorp Manageengine Netflow Analyzer 9.8Zohocorp Manageengine Netflow Analyzer 9.8.5Zohocorp Manageengine Netflow Analyzer 8.6Zohocorp Manageengine Netflow Analyzer 9.0Zohocorp Manageengine Netflow Analyzer 9.8.6Zohocorp Manageengine Netflow Analyzer 9.8.7
NA
CVE-2022-35404
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Netflow AnalyzerZohocorp Manageengine Firewall AnalyzerZohocorp Manageengine Firewall Analyzer 12.5
4.3
CVSSv2
CVE-2018-12998
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote m...
Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -
5
CVSSv2
CVE-2018-12997
Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows malicious u...
Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -
5
CVSSv2
CVE-2014-5445
Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 up to and including 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet o...
Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Netflow Analyzer
4.3
CVSSv2
CVE-2018-10803
Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 prior to 12.3.125 (build 123125) allows remote malicious users to inject arbitrary web script or HTML via a crafted description value. This can be exploited t...
Zohocorp Manageengine Netflow Analyzer
5
CVSSv2
CVE-2015-4418
Zoho NetFlow Analyzer build 10250 and previous versions does not have an off autocomplete attribute for a password field, which makes it easier for remote malicious users to obtain access by leveraging an unattended workstation.
Zohocorp Manageengine Netflow Analyzer -
7.5
CVSSv2
CVE-2015-2959
Zoho NetFlow Analyzer build 10250 and previous versions does not check for administrative authorization, which allows remote malicious users to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role.
Zohocorp Manageengine Netflow Analyzer -
4.3
CVSSv2
CVE-2015-2960
Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Zohocorp Manageengine Netflow Analyzer -
6.8
CVSSv2
CVE-2015-2961
Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and previous versions allows remote malicious users to hijack the authentication of administrators.
Zohocorp Manageengine Netflow Analyzer -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook