Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.4Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote…EPSS 4.0%May 21, 2026
- High8.2Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.EPSS 2.1%Apr 16, 2026
- High8.1Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in th…EPSS 2.6%Apr 16, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.EPSS 1.0%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.Apr 3, 2026
- Medium5.4Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report.Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report.Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report.EPSS 1.0%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.EPSS 1.0%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.EPSS 1.0%Apr 3, 2026
- UnknownZoho ManageEngine ADSelfService Plus Username EnumerationKEVEPSS 10.0%Apr 1, 2026
- High8.3Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option.EPSS 7.9%Feb 23, 2026
- UnknownZoho ManageEngine OpManager Smart Update Manager Servlet Remote Code ExecutionKEVOct 28, 2025
- UnknownZoho firewall_analyzer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJun 11, 2025
- High8.1Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.EPSS 173.0%May 14, 2025
- High8.1Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.EPSS 4657.0%May 14, 2025
- Unknownmanageengine servicedesk Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVSep 19, 2024
- UnknownZoho ManageEngine ADManager Plus Authenticated VulnerabilityKEVJul 1, 2024
- UnknownZoho manageengine_opmanager Deserialization of Untrusted DataKEVJan 13, 2024
- UnknownZoho manageengine_access_manager_plus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJan 6, 2024
- UnknownZoho manageengine_opmanager Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJan 6, 2024
- UnknownZoho manageengine_firewall_analyzer Improper Handling of Exceptional ConditionsKEVNov 17, 2023
- UnknownZoho manageengine_adaudit_plus Improper Restriction of XML External Entity ReferenceKEVNov 13, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityKEVEPSS 99.8%Jan 18, 2023
34 records · page 1 of 2
PreviousNext