← Back

Zohocorp

zohocorp

550 CVEs • 69 products

Products (69)

Click to collapse
Toggle
Manageengine Opmanager
manageengine_opmanager
56 CVEs
Manageengine Applications Manager
manageengine_applications_manager
56 CVEs
Manageengine Admanager Plus
manageengine_admanager_plus
53 CVEs
Manageengine Adaudit Plus
manageengine_adaudit_plus
52 CVEs
Manageengine Adselfservice Plus
manageengine_adselfservice_plus
51 CVEs
Manageengine Servicedesk Plus
manageengine_servicedesk_plus
50 CVEs
Manageengine Desktop Central
manageengine_desktop_central
48 CVEs
Manageengine Supportcenter Plus
manageengine_supportcenter_plus
31 CVEs
Manageengine Netflow Analyzer
manageengine_netflow_analyzer
28 CVEs
Manageengine Exchange Reporter Plus
manageengine_exchange_reporter_plus
28 CVEs
Manageengine Assetexplorer
manageengine_assetexplorer
26 CVEs
Manageengine Servicedesk Plus Msp
manageengine_servicedesk_plus_msp
26 CVEs
Manageengine Password Manager Pro
manageengine_password_manager_pro
22 CVEs
Manageengine Eventlog Analyzer
manageengine_eventlog_analyzer
19 CVEs
Manageengine Network Configuration Manager
manageengine_network_configuration_manager
14 CVEs
Manageengine Remote Access Plus
manageengine_remote_access_plus
14 CVEs
Manageengine Pam360
manageengine_pam360
14 CVEs
Manageengine Firewall Analyzer
manageengine_firewall_analyzer
12 CVEs
Manageengine Access Manager Plus
manageengine_access_manager_plus
11 CVEs
Manageengine It360
manageengine_it360
9 CVEs
Manageengine Log360
manageengine_log360
9 CVEs
Manageengine Oputils
manageengine_oputils
8 CVEs
Manageengine Endpoint Central
manageengine_endpoint_central
8 CVEs
Manageengine Analytics Plus
manageengine_analytics_plus
7 CVEs
Manageengine Datasecurity Plus
manageengine_datasecurity_plus
6 CVEs
Manageengine Opmanager Msp
manageengine_opmanager_msp
6 CVEs
Manageengine Opmanager Plus
manageengine_opmanager_plus
6 CVEs
Manageengine Social It Plus
manageengine_social_it_plus
5 CVEs
Servicedesk Plus
servicedesk_plus
5 CVEs
Manageengine Key Manager Plus
manageengine_key_manager_plus
5 CVEs
Manageengine Cloud Security Plus
manageengine_cloud_security_plus
5 CVEs
Manageengine Sharepoint Manager Plus
manageengine_sharepoint_manager_plus
5 CVEs
Webnms Framework
webnms_framework
4 CVEs
Manageengine Application Control Plus
manageengine_application_control_plus
4 CVEs
Manageengine M365 Manager Plus
manageengine_m365_manager_plus
4 CVEs
Manageengine Device Control Plus
manageengine_device_control_plus
4 CVEs
Manageengine Browser Security Plus
manageengine_browser_security_plus
3 CVEs
Manageengine Mobile Device Manager Plus
manageengine_mobile_device_manager_plus
3 CVEs
Manageengine O365 Manager Plus
manageengine_o365_manager_plus
3 CVEs
Manageengine Patch Connect Plus
manageengine_patch_connect_plus
3 CVEs
Manageengine Patch Manager Plus
manageengine_patch_manager_plus
3 CVEs
Manageengine Vulnerability Manager Plus
manageengine_vulnerability_manager_plus
3 CVEs
Manageengine Ad360
manageengine_ad360
3 CVEs
Manageengine Recoverymanager Plus
manageengine_recoverymanager_plus
3 CVEs
Manageengine Opstor
manageengine_opstor
2 CVEs
Firewall Analyzer
firewall_analyzer
2 CVEs
Manageengine Desktop Central Managed Service Providers
manageengine_desktop_central_managed_service_providers
2 CVEs
Zoho Crm Lead Magnet
zoho_crm_lead_magnet
2 CVEs
Manageengine Endpoint Dlp Plus
manageengine_endpoint_dlp_plus
2 CVEs
Manageengine Os Deployer
manageengine_os_deployer
2 CVEs
Manageengine Remote Monitoring And Management Central
manageengine_remote_monitoring_and_management_central
2 CVEs
Zoho Forms
zoho_forms
2 CVEs
Manageengine Log360 Ueba
manageengine_log360_ueba
2 CVEs
Manageengine M365 Security Plus
manageengine_m365_security_plus
2 CVEs
Manageengine Ddi Central
manageengine_ddi_central
2 CVEs
Webnms
webnms
1 CVE
Password Manager Pro
password_manager_pro
1 CVE
Site24x7 Mobile Network Poller
site24x7_mobile_network_poller
1 CVE
Desktop Central
desktop_central
1 CVE
Manageengine Recovery Manager Plus
manageengine_recovery_manager_plus
1 CVE
Manageengine Firewall
manageengine_firewall
1 CVE
Manageengine Recovermanager Plus
manageengine_recovermanager_plus
1 CVE
Manageengine Applications Control Plus
manageengine_applications_control_plus
1 CVE
Log360
log360
1 CVE
Manageengine Appcreator
manageengine_appcreator
1 CVE
Manageengine Endpoint Central Msp
manageengine_endpoint_central_msp
1 CVE
Manageengine Remote Monitoring And Management
manageengine_remote_monitoring_and_management
1 CVE
Manageengine Secure Gateway Server
manageengine_secure_gateway_server
1 CVE
Manageengine Supportcentre Plus
manageengine_supportcentre_plus
1 CVE

CVEs (550)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20664
1Zohocorp
1Manageengine Adselfservice Plus
Nov 21, 2024
Jan 3, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
CVE-2018-20485
1Zohocorp
1Manageengine Adselfservice Plus
Nov 21, 2024
Dec 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.
CVE-2018-20484
1Zohocorp
1Manageengine Adselfservice Plus
Nov 21, 2024
Dec 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
CVE-2018-20339
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Dec 21, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.
CVE-2018-20338
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Dec 21, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.
CVE-2018-20173
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Dec 17, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.
CVE-2018-19118
1Zohocorp
1Manageengine Adaudit Plus
Nov 21, 2024
Dec 13, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service (stack-based buffer overflow) via the 'Domain Name' field when adding a new domain.
CVE-2018-19921
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Dec 6, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.
CVE-2018-18716
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Nov 20, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.
CVE-2018-18715
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Nov 20, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS.
CVE-2018-19288
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Nov 15, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.
CVE-2018-18980
1Zohocorp
2Manageengine Network Configuration Manager
Manageengine Opmanager
Nov 21, 2024
Nov 6, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For e...Show more
An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrary remote FTP server.Show less
CVE-2018-18949
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Nov 5, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
CVE-2018-18475
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Oct 23, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
CVE-2018-18262
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Oct 17, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS.
CVE-2018-17596
1Zohocorp
1Manageengine Assetexplorer
Nov 21, 2024
Oct 2, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.
CVE-2018-16364
1Zohocorp
1Manageengine Applications Manager
Nov 21, 2024
Sep 26, 2018
N/A· v4
8.1 HIGH· v3
9.3 HIGH· v2
A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.
CVE-2018-16965
1Zohocorp
1Manageengine Supportcenter Plus
Nov 21, 2024
Sep 21, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter.
CVE-2018-16833
1Zohocorp
1Manageengine Desktop Central
Nov 21, 2024
Sep 21, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.
CVE-2018-17283
1Zohocorp
1Manageengine Opmanager
Nov 21, 2024
Sep 21, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Anal...Show more
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter.Show less