Zohocorp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-24743 1Zohocorp 1Manageengine Applications Manager Jun 17, 2026 Nov 3, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter.
CVE-2021-20136 1Zohocorp 1Manageengine Log360 Jun 17, 2026 Nov 1, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to c...Show more ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log360 to restart. An attacker can leverage this vulnerability to achieve remote code execution by replacing files executed by Log360 on startup.Show less
CVE-2021-35512 1Zohocorp 1Manageengine Applications Manager Jun 17, 2026 Oct 21, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.
CVE-2021-41075 1Zohocorp 1Manageengine Opmanager Jun 17, 2026 Oct 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API.
CVE-2021-40493 1Zohocorp 1Manageengine Opmanager Jun 17, 2026 Oct 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.
CVE-2021-20131 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 13, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface.
CVE-2021-20130 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 13, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface.
CVE-2021-38298 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE.
CVE-2021-37931 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37930 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37929 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37928 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37926 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37924 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37923 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37922 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to another.
CVE-2021-37921 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37920 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37919 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37918 1Zohocorp 1Manageengine Admanager Plus Jun 17, 2026 Oct 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

Previous 1...111213...28 Next