Zohocorp ManageEngine EndPoint Central versionsĀ 11.4.2516.1 and prior are vulnerable to XML Injection....
zohocorp Vulnerability Advisory Catalog
Total 550 security vulnerabilities recorded for zohocorp software and firmware.
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion v...
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central...
Zohocorp ManageEngine Applications Manager versionsĀ 176600 and prior are vulnerable to stored cross-site scripting in theĀ File/Directory monitor....
Zohocorp ManageEngine Exchange reporter Plus versionĀ 5722 and below are vulnerable to Stored XSSĀ in the Attachments by filename keywordĀ report....
Zohocorp ManageEngine Exchange reporter Plus versionĀ 5722 and below are vulnerable to Stored XSSĀ in the Folder-wise read mails with subject report....
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module....
Zohocorp ManageEngineĀ Exchange Reporter Plus versionsĀ 5721 and prior are vulnerable to Remote code execution in theĀ Content Search module....
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports....
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports....
Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in theĀ OU History report....
Zohocorp ManageEngineĀ ADAudit Plus versions below 8511 are vulnerable to SQL injection whileĀ exporting reports....
ZohocorpĀ ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data....
ZohocorpĀ ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report....
Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in t...
Zohocorp ManageEngineĀ ADAudit Plus versionsĀ 8510Ā and prior are vulnerable to authenticated SQL injection in theĀ OU History report....
Zohocorp ManageEngineĀ ADSelfService Plus versionsĀ 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports....
Zohocorp ManageEngine ServiceDesk Plus versionsĀ belowĀ 14920Ā , ServiceDesk Plus MSP and SupportCentre Plus versions belowĀ 14910 are vulnerable to Store...
Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to theĀ session mishandling. Valid account hold...
ManageEngine Endpoint Central versions beforeĀ 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in th...
Zohocorp ManageEngine Applications Manager versionsĀ 174000 and prior are vulnerable to the incorrect authorization in the update user function....
ZohocorpĀ ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve se...
Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection inĀ the reports module....
Zohocorp ManageEngine SharePoint Manager Plus versionsĀ 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management opti...