Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zohocorp manageengine assetexplorer 6.2.0 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2018-17596
In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability exists in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.
Zohocorp Manageengine Assetexplorer 6.2.0
578
VMScore
CVE-2019-12994
Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL.
Zohocorp Manageengine Assetexplorer 6.2.0
490
VMScore
CVE-2019-14693
Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Zohocorp Manageengine Assetexplorer 6.2.0
578
VMScore
CVE-2019-12959
Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter.
Zohocorp Manageengine Assetexplorer
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4651
CVE-2024-34255
elevation of privilege
CVE-2024-25529
CVE-2024-4671
NULL pointer dereference
CVE-2024-25527
template injection
CVE-2008-0166
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started