Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zohocorp manageengine remote access plus vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2020-11552
An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated malicious user to escalate privileges o...
Zohocorp Manageengine Adselfservice Plus
Zohocorp Manageengine Adselfservice Plus 6.0
6.8
CVSSv2
CVE-2020-15589
A design issue exists in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus prior to 10.1.2119.1. By exploiting this issue, an attacker-controlled server can fo...
Zohocorp Manageengine Desktop Central 10.0.552.w
Zohocorp Manageengine Remote Access Plus
1 Github repository
6.5
CVSSv2
CVE-2019-11361
Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full application takeover.
Zohocorp Manageengine Remote Access Plus 10.0.258
6.5
CVSSv2
CVE-2016-4889
ZOHO ManageEngine ServiceDesk Plus prior to 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions.
Zohocorp Servicedesk Plus
5
CVSSv2
CVE-2022-26653
Zoho ManageEngine Remote Access Plus prior to 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).
Zohocorp Manageengine Remote Access Plus
5
CVSSv2
CVE-2022-26777
Zoho ManageEngine Remote Access Plus prior to 10.1.2137.15 allows guest users to view license details.
Zohocorp Manageengine Remote Access Plus
5
CVSSv2
CVE-2021-41827
Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive.
Zohocorp Manageengine Remote Access Plus
5
CVSSv2
CVE-2021-41829
Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.
Zohocorp Manageengine Remote Access Plus
5
CVSSv2
CVE-2021-41828
Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml.
Zohocorp Manageengine Remote Access Plus
5
CVSSv2
CVE-2010-3273
ZOHO ManageEngine ADSelfService Plus prior to 4.5 Build 4500 allows remote malicious users to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResul...
Zohocorp Manageengine Adselfservice Plus
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »