Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zohocorp manageengine admanager plus vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2023-38332
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 7.2
9.8
CVSSv3
CVE-2021-33911
Zoho ManageEngine ADManager Plus prior to 7110 allows remote code execution.
Zohocorp Manageengine Admanager Plus 7.1
Zohocorp Manageengine Admanager Plus
7.5
CVSSv3
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus prior to 6112 is vulnerable to SSRF.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 6.1
6.5
CVSSv3
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus prior to 6112 is vulnerable to mail spoofing.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 6.1
9.8
CVSSv3
CVE-2021-37424
ManageEngine ADSelfService Plus prior to 6112 is vulnerable to domain user account takeover.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 6.1
7.2
CVSSv3
CVE-2023-29084
Zoho ManageEngine ADManager Plus prior to 7181 allows for authenticated users to exploit command injection via Proxy settings.
Zohocorp Manageengine Admanager Plus 7.1
Zohocorp Manageengine Admanager Plus
1 Github repository
5.4
CVSSv3
CVE-2023-41904
Zoho ManageEngine ADManager Plus prior to 7203 allows 2FA bypass (for AuthToken generation) in REST APIs.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 7.2
9.8
CVSSv3
CVE-2021-37762
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 7.1
8.8
CVSSv3
CVE-2021-20130
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 7.1
8.8
CVSSv3
CVE-2021-20131
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 7.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36920
buffer overflow
CVE-2024-36913
CVE-2024-5497
CVE-2024-23917
CVE-2024-4956
server-side request forgery
CVE-2024-35468
SSTI
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »