zohocorp Vulnerability Advisory Catalog

Total 550 security vulnerabilities recorded for zohocorp software and firmware.

← Back to All Vendors
CVE-2026-27655 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS inĀ Permissions Based on MailboxesĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-4108 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS inĀ Non-Owner MailboxĀ PermissionĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-4107 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS inĀ Folder Message Count and SizeĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-3880 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS inĀ Public Folder Client PermissionsĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-3879 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS inĀ Equipment Mailbox DetailsĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-28703 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter PlusĀ versions before 5802 are vulnerable toĀ Stored XSSĀ inĀ Mails Exchanged Between UsersĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-28756 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter PlusĀ versions before 5802 are vulnerable toĀ Stored XSSĀ inĀ Permissions based on Distribution GroupsĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2026-28754 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter PlusĀ versions before 5802 are vulnerable toĀ Stored XSSĀ inĀ Distribution ListsĀ report....

šŸ“… 2026-04-03
CVSS 7.3 Dossier →
CVE-2025-9435 MEDIUM
Component: manageengine_admanager_plus

Zohocorp ManageEngine ADManager Plus versions belowĀ 7230Ā are vulnerable toĀ Path TraversalĀ in the User Management module...

šŸ“… 2026-01-13
CVSS 5.5 Dossier →
CVE-2025-11669 HIGH
Component: manageengine_pam360

ZohocorpĀ ManageEngine PAM360 versions before 8202; Password Manager ProĀ versions before 13221; Access Manager Plus versions prior to 4401 are vulnerab...

šŸ“… 2026-01-13
CVSS 8.1 Dossier →
CVE-2025-11250 CRITICAL
Component: manageengine_adselfservice_plus

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations....

šŸ“… 2026-01-13
CVSS 9.1 Dossier →
CVE-2025-9787 MEDIUM
Component: manageengine_applications_manager

Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view....

šŸ“… 2025-12-18
CVSS 6.1 Dossier →
CVE-2025-11670 MEDIUM
Component: manageengine_admanager_plus

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable toĀ NTLM Hash Exposure.Ā  This vulnerability is exploitable only by technicians...

šŸ“… 2025-12-15
CVSS 6.4 Dossier →
CVE-2025-7633 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the CustomĀ report....

šŸ“… 2025-11-11
CVSS 7.3 Dossier →
CVE-2025-7632 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the PublicĀ Folders report....

šŸ“… 2025-11-11
CVSS 7.3 Dossier →
CVE-2025-7430 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Si...

šŸ“… 2025-11-11
CVSS 7.3 Dossier →
CVE-2025-7429 HIGH
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved repo...

šŸ“… 2025-11-11
CVSS 7.3 Dossier →
CVE-2025-5347 MEDIUM
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module....

šŸ“… 2025-10-30
CVSS 6.3 Dossier →
CVE-2025-5343 MEDIUM
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option....

šŸ“… 2025-10-30
CVSS 6.3 Dossier →
CVE-2025-5342 MEDIUM
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module....

šŸ“… 2025-10-30
CVSS 4.3 Dossier →
CVE-2025-11248 LOW
Component: manageengine_endpoint_central

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user w...

šŸ“… 2025-10-27
CVSS 3.2 Dossier →
CVE-2025-6239 MEDIUM
Component: manageengine_applications_manager

Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor....

šŸ“… 2025-10-21
CVSS 6.5 Dossier →
CVE-2025-10020 HIGH
Component: manageengine_admanager_plus

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script componen...

šŸ“… 2025-10-21
CVSS 8.5 Dossier →
CVE-2025-9428 HIGH
Component: manageengine_analytics_plus

Zohocorp ManageEngine Analytics Plus versionsĀ 6171 and prior are vulnerable to authenticated SQL Injection via the key update api....

šŸ“… 2025-10-21
CVSS 8.3 Dossier →
Page 1 of 23 (550 Total Records)
Next Page →