zohocorp Vulnerability Advisory Catalog

Total 550 security vulnerabilities recorded for zohocorp software and firmware.

← Back to All Vendors
CVE-2025-7473 MEDIUM
Component: manageengine_endpoint_central

Zohocorp ManageEngine EndPoint Central versionsĀ 11.4.2516.1 and prior are vulnerable to XML Injection....

šŸ“… 2025-10-21
CVSS 5.2 Dossier →
Component: manageengine_endpoint_central

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion v...

šŸ“… 2025-10-21
CVSS 3.3 Dossier →
Component: manageengine_endpoint_central

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central...

šŸ“… 2025-09-25
CVSS 3.9 Dossier →
Component: manageengine_applications_manager

Zohocorp ManageEngine Applications Manager versionsĀ 176600 and prior are vulnerable to stored cross-site scripting in theĀ File/Directory monitor....

šŸ“… 2025-07-23
CVSS 6.4 Dossier →
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange reporter Plus versionĀ 5722 and below are vulnerable to Stored XSSĀ in the Attachments by filename keywordĀ report....

šŸ“… 2025-06-26
CVSS 8.1 Dossier →
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange reporter Plus versionĀ 5722 and below are vulnerable to Stored XSSĀ in the Folder-wise read mails with subject report....

šŸ“… 2025-06-26
CVSS 8.1 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module....

šŸ“… 2025-06-09
CVSS 8.3 Dossier →
CVE-2025-3835 CRITICAL
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngineĀ Exchange Reporter Plus versionsĀ 5721 and prior are vulnerable to Remote code execution in theĀ Content Search module....

šŸ“… 2025-06-09
CVSS 9.6 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports....

šŸ“… 2025-06-09
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports....

šŸ“… 2025-06-09
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in theĀ OU History report....

šŸ“… 2025-05-23
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngineĀ ADAudit Plus versions below 8511 are vulnerable to SQL injection whileĀ exporting reports....

šŸ“… 2025-05-23
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

ZohocorpĀ ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data....

šŸ“… 2025-05-22
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

ZohocorpĀ ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report....

šŸ“… 2025-05-22
CVSS 8.3 Dossier →
CVE-2025-3444 MEDIUM
Component: manageengine_servicedesk_plus_msp

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in t...

šŸ“… 2025-05-22
CVSS 6.5 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngineĀ ADAudit Plus versionsĀ 8510Ā and prior are vulnerable to authenticated SQL injection in theĀ OU History report....

šŸ“… 2025-05-14
CVSS 8.1 Dossier →
Component: manageengine_adselfservice_plus

Zohocorp ManageEngineĀ ADSelfService Plus versionsĀ 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports....

šŸ“… 2025-05-14
CVSS 8.1 Dossier →
Component: manageengine_servicedesk_plus

Zohocorp ManageEngine ServiceDesk Plus versionsĀ belowĀ 14920Ā , ServiceDesk Plus MSP and SupportCentre Plus versions belowĀ 14910 are vulnerable to Store...

šŸ“… 2025-03-21
CVSS 6.3 Dossier →
Component: manageengine_adselfservice_plus

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to theĀ session mishandling. Valid account hold...

šŸ“… 2025-03-03
CVSS 8.1 Dossier →
Component: manageengine_endpoint_central

ManageEngine Endpoint Central versions beforeĀ 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in th...

šŸ“… 2025-02-05
CVSS 3.5 Dossier →
Component: manageengine_applications_manager

Zohocorp ManageEngine Applications Manager versionsĀ 174000 and prior are vulnerable to the incorrect authorization in the update user function....

šŸ“… 2025-01-29
CVSS 8.1 Dossier →
Component: manageengine_analytics_plus

ZohocorpĀ ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve se...

šŸ“… 2024-11-27
CVSS 8.1 Dossier →
Component: manageengine_adaudit_plus

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection inĀ the reports module....

šŸ“… 2024-11-18
CVSS 8.3 Dossier →
Component: manageengine_sharepoint_manager_plus

Zohocorp ManageEngine SharePoint Manager Plus versionsĀ 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management opti...

šŸ“… 2024-11-08
CVSS 8.5 Dossier →
Page 2 of 23 (550 Total Records)