Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine opmanager 11.4 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.
Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5Zohocorp Manageengine Opmanager 12.3
6.1
CVSSv3
CVE-2018-18716
Zoho ManageEngine OpManager 12.3 prior to 123219 has a Self XSS Vulnerability.
Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5
9.8
CVSSv3
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 prior to 123222 has SQL Injection via Mail Server settings.
Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5
NA
CVE-2014-6035
Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and previous versions allows remote malicious users to write and execute arbitrary files via a .. (dot dot) in the FILENAME parameter.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 11.4
9.8
CVSSv3
CVE-2015-9107
Zoho ManageEngine OpManager 11 up to and including 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a univers...
Zohocorp Manageengine Opmanager 11.6Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 12.2Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 11.5Zohocorp Manageengine Opmanager 11.3
6.1
CVSSv3
CVE-2018-19921
Zoho ManageEngine OpManager 12.3 prior to 123237 has XSS in the domain controller.
Zohocorp Manageengine Opmanager 123230Zohocorp Manageengine Opmanager 123229Zohocorp Manageengine Opmanager 123224Zohocorp Manageengine Opmanager 123223Zohocorp Manageengine Opmanager 123222Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 123231Zohocorp Manageengine Opmanager 11.5
NA
CVE-2014-7864
Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 up to and including 11.5 build 11400 and IT360 10.5 and previous versions allow remote attackers and remote authenticated users to execute arbitrary SQL ...
Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 11.5Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 9.4Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.1Zohocorp Manageengine Opmanager 10.0
NA
CVE-2014-7866
Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) up to and including 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. (dot dot) in the (1...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360 10.4Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine Opmanager 8.8Zohocorp Manageengine Opmanager 10.2Zohocorp Manageengine Opmanager 11.0Zohocorp Manageengine Opmanager 9.2Zohocorp Manageengine Opmanager 9.4Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Opmanager 9.0Zohocorp Manageengine Opmanager 9.1Zohocorp Manageengine Opmanager 11.1Zohocorp Manageengine Opmanager 11.2Zohocorp Manageengine Opmanager 10.0Zohocorp Manageengine Opmanager 10.1
NA
CVE-2014-7867
SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allows remote attackers or remote authenticated users to execute arbitrary SQL command...
Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine It360 10.3.0Zohocorp Manageengine It360 10.4
NA
CVE-2014-7868
Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the A...
Zohocorp Manageengine Social It Plus 11.0Zohocorp Manageengine Opmanager 11.3Zohocorp Manageengine Opmanager 11.4Zohocorp Manageengine It360 10.4Zohocorp Manageengine It360 10.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook