Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine opmanager - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2014-7864
Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 up to and including 11.5 build 11400 and IT360 10.5 and previous versions allow remote attackers and remote authenticated users to execute arbitrary SQL ...
Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 9.4Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.1Zohocorp Manageengine Opmanager 10.0
5
CVSSv2
CVE-2014-6034
Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 up to and including 11.3, Social IT Plus 11.0, and IT360 10.4 and previous versions allows remote attackers or remote authenticat...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.0Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 10.1Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.4
7.5
CVSSv2
CVE-2014-7866
Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) up to and including 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. (dot dot) in the (1...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360 10.4Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.4Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 10.0Zohocorp Manageengine Opmanager 10.1
4.3
CVSSv2
CVE-2018-19921
Zoho ManageEngine OpManager 12.3 prior to 123237 has XSS in the domain controller.
Zohocorp Manageengine Opmanager 123230Zohocorp Manageengine Opmanager 123229Zohocorp Manageengine Opmanager 123224Zohocorp Manageengine Opmanager 123223Zohocorp Manageengine Opmanager 123222Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 123231Zohocorp Manageengine Opmanager 11.5
5
CVSSv2
CVE-2015-9107
Zoho ManageEngine OpManager 11 up to and including 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a univers...
Zohocorp Manageengine Opmanager 11.6Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 12.2Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 11.5Zohocorp Manageengine Opmanager 11.3
NA
CVE-2022-43473
A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.
Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager Plus 12.6Zohocorp Manageengine Opmanager PlusZohocorp Manageengine Opmanager Msp 12.6Zohocorp Manageengine Opmanager Msp
5
CVSSv2
CVE-2020-12116
Zoho ManageEngine OpManager Stable build prior to 124196 and Released build prior to 125125 allows an unauthenticated malicious user to read arbitrary files on the server by sending a crafted request.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.4Zohocorp Manageengine Opmanager 12.5
4.3
CVSSv2
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.
Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5Zohocorp Manageengine Opmanager 12.3
4.3
CVSSv2
CVE-2018-18716
Zoho ManageEngine OpManager 12.3 prior to 123219 has a Self XSS Vulnerability.
Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5
7.5
CVSSv2
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 prior to 123222 has SQL Injection via Mail Server settings.
Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook