Show filters
506 Total Results
Displaying 121-130 of 506
Sort by:
Attacker Value
Unknown
CVE-2022-40773
Disclosure Date: November 12, 2022 (last updated February 24, 2025)
Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows users to obtain sensitive data during an exportMickeyList export of requests from the list view.
0
Attacker Value
Unknown
CVE-2022-43671
Disclosure Date: November 12, 2022 (last updated February 24, 2025)
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.
0
Attacker Value
Unknown
CVE-2022-41339
Disclosure Date: November 12, 2022 (last updated December 22, 2024)
In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation.
0
Attacker Value
Unknown
CVE-2022-41978
Disclosure Date: October 27, 2022 (last updated February 24, 2025)
Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.
0
Attacker Value
Unknown
CVE-2022-40300
Disclosure Date: September 16, 2022 (last updated February 24, 2025)
Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.
0
Attacker Value
Unknown
CVE-2022-38772
Disclosure Date: August 29, 2022 (last updated October 08, 2023)
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
0
Attacker Value
Unknown
CVE-2020-21642
Disclosure Date: August 15, 2022 (last updated February 24, 2025)
Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code.
0
Attacker Value
Unknown
CVE-2020-21641
Disclosure Date: August 15, 2022 (last updated February 24, 2025)
Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file.
0
Attacker Value
Unknown
CVE-2022-37024
Disclosure Date: August 10, 2022 (last updated October 08, 2023)
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.
0
Attacker Value
Unknown
CVE-2022-36923
Disclosure Date: August 10, 2022 (last updated February 24, 2025)
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.
0
