manageengine applications manager vulnerabilities and exploits

(subscribe to this query)

Zoho ManageEngine Applications Manager prior to 14600 allows a remote unauthenticated malicious user to disclose license related information via WieldFeedServlet servlet.

Zohocorp Manageengine Applications Manager Zohocorp Manageengine Applications Manager 14.5

The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager prior to 11.9 build 11912, OpManager 8 up to and including 11.5 build 11400, and IT360 10.5 and previous versions does not properly restrict access, which allows remote attackers and rem...

Zohocorp Manageengine Applications Manager Zohocorp Manageengine It360 Zohocorp Manageengine Opmanager

1 EDB exploit

Zoho ManageEngine Applications Manager 14 prior to 14520 allows a remote unauthenticated malicious user to disclose OS file names via FailOverHelperServlet.

Zohocorp Manageengine Applications Manager 14.0

An issue exists in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications Manager is prone to attack due to lack of file permission security. The malicious users who are in “Authenticated Users” group can exploit...

Zohocorp Manageengine Applications Manager 14.3

Zoho ManageEngine Applications Manager prior to 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.

Zohocorp Manageengine Applications Manager

Zoho ManageEngine Applications Manager prior to 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function.

Zohocorp Manageengine Applications Manager

An issue exists in Zoho ManageEngine OpManager up to and including 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-authority user can gain the authority of SYSTEM on the server. One can consequently...

Zohocorp Manageengine Applications Manager

An issue exists in Zoho ManageEngine Application Manager up to and including 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-authority user can gain the authority of SYSTEM on the server. One can con...

Zohocorp Manageengine Applications Manager

An issue exists in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request.

Zohocorp Manageengine Applications Manager 12.3

In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widget" with a "Custom HTML or Text" field. Once this widget is cr...

Zohocorp Manageengine Applications Manager 13.1

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook