Manageengine vulnerabilities
88 CVEs and advisories name Manageengine as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-36037Insufficient Access Control Vulnerability
- CVE-2024-36036Insufficient Access Control Vulnerability
- CVE-2024-27310DOS Vulnerability
- CVE-2024-27314Stored XSS Vulnerability
- CVE-2024-21791SQL Injection in ADAudit Plus
- CVE-2023-49335Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.
- CVE-2023-49334Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.
- CVE-2023-49333Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.
- CVE-2023-49332Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.
- CVE-2023-49331Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.
- CVE-2024-27312Authorization vulnerability in PAM360
- CVE-2023-49330Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.
- CVE-2024-21775SQL Injection
- CVE-2024-0269SQL Injection
- CVE-2024-0253SQL Injection
- CVE-2024-0252Remote code execution
- CVE-2023-47211A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.
- CVE-2023-6105ManageEngine Information Disclosure in Multiple Products
- CVE-2023-4769Server-Side Request Forgery in ManageEngine Desktop Central
- CVE-2023-4768Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central
- CVE-2023-4767Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central
- CVE-2023-35719ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability
- CVE-2022-43473A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168.
- CVE-2016-9498ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects
- CVE-2016-9491ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity
- CVE-2016-9489ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass
- CVE-2016-9490ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability
- CVE-2016-9488ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities