zohocorp Vulnerability Advisory Catalog

Total 550 security vulnerabilities recorded for zohocorp software and firmware.

← Back to All Vendors
Component: manageengine_adaudit_plus

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option....

📅 2024-08-12
CVSS 8.3 Dossier →
CVE-2024-5678 MEDIUM
Component: manageengine_applications_manager

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monito...

📅 2024-08-01
CVSS 4.7 Dossier →
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module....

📅 2024-07-26
CVSS 8.3 Dossier →
Component: manageengine_exchange_reporter_plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module....

📅 2024-07-26
CVSS 8.3 Dossier →
Component: manageengine_ddi_central

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys....

📅 2024-07-17
CVSS 8.8 Dossier →
Component: manageengine_ddi_central

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new fil...

📅 2024-07-17
CVSS 5.5 Dossier →
Component: manageengine_pam360

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610....

📅 2024-05-29
CVSS 6.3 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings....

📅 2024-05-27
CVSS 5.5 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the...

📅 2024-05-27
CVSS 4.2 Dossier →
Component: manageengine_adselfservice_plus

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input....

📅 2024-05-27
CVSS 5.3 Dossier →
Component: manageengine_servicedesk_plus

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored ...

📅 2024-05-27
CVSS 2.4 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerab...

📅 2024-05-22
CVSS 4.7 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details....

📅 2024-05-20
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report....

📅 2024-05-20
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature....

📅 2024-05-20
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares....

📅 2024-05-20
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option....

📅 2024-05-20
CVSS 8.3 Dossier →
Component: manageengine_pam360

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. N...

📅 2024-05-20
CVSS 8.1 Dossier →
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data....

📅 2024-05-20
CVSS 8.3 Dossier →
Component: manageengine_exchange_reporter_plus

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature....

📅 2024-02-16
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fix...

📅 2024-02-02
CVSS 8.3 Dossier →
Component: manageengine_adaudit_plus

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data....

📅 2024-02-02
CVSS 8.3 Dossier →
CVE-2023-48793 CRITICAL
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature....

📅 2024-02-02
CVSS 9.8 Dossier →
CVE-2023-48792 CRITICAL
Component: manageengine_adaudit_plus

Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option....

📅 2024-02-02
CVSS 9.8 Dossier →
Page 4 of 23 (550 Total Records)