Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zohocorp manageengine applications manager 13.1 vulnerabilities and exploits
(subscribe to this query)
605
VMScore
CVE-2017-11738
In Zoho ManageEngine Application Manager before 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack.
Zohocorp Manageengine Applications Manager 13.1
605
VMScore
CVE-2017-11740
In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse this functionality by uploading a malicious script that can be executed on the r...
Zohocorp Manageengine Applications Manager 13.1
578
VMScore
CVE-2020-28679
A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated malicious users to execute a SQL injection via a crafted request.
Zohocorp Manageengine Applications Manager 11.0
Zohocorp Manageengine Applications Manager 11.1
Zohocorp Manageengine Applications Manager 11.2
Zohocorp Manageengine Applications Manager 11.3
Zohocorp Manageengine Applications Manager 11.4
Zohocorp Manageengine Applications Manager 11.5
Zohocorp Manageengine Applications Manager 11.6
Zohocorp Manageengine Applications Manager 11.7
Zohocorp Manageengine Applications Manager 11.8
Zohocorp Manageengine Applications Manager 11.9
Zohocorp Manageengine Applications Manager 12.0
Zohocorp Manageengine Applications Manager 12.1
Zohocorp Manageengine Applications Manager 12.2
Zohocorp Manageengine Applications Manager 12.3
Zohocorp Manageengine Applications Manager 12.5
Zohocorp Manageengine Applications Manager 12.6
Zohocorp Manageengine Applications Manager 12.7
Zohocorp Manageengine Applications Manager 12.8
Zohocorp Manageengine Applications Manager 12.9
Zohocorp Manageengine Applications Manager 13.0
Zohocorp Manageengine Applications Manager 13.1
Zohocorp Manageengine Applications Manager 13.2
383
VMScore
CVE-2017-11739
In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widget" with a "Custom HTML or Text" field. Once this widget is cr...
Zohocorp Manageengine Applications Manager 13.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started