Read the docs

Zohocorp

Records612All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high245CVSS 7.0–8.9

Exploited now

Zohocorp records in CISA KEV
TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Priority CRITICAL 89KEV 2023-03-07TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-01-23TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-09-22TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-10TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-01TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Manageengine Applications Manager 56 records HIGH Manageengine Opmanager 56 records CRITICAL Manageengine Admanager Plus 53 records CRITICAL Manageengine Adaudit Plus 52 records CRITICAL Manageengine Adselfservice Plus 51 records CRITICAL Manageengine Servicedesk Plus 50 records CRITICAL Manageengine Desktop Central 48 records CRITICAL Manageengine Supportcenter Plus 31 records CRITICAL

Records

12 records in Manageengine Firewall Analyzer · all components

TI-2022-17228 CVE-2022-37024 · GHSA-hm5j-w2qf-6392

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…

Priority HIGH 78

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated user…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.79996 Published 2022-08-09 No fix listed
TI-2023-25530 CVE-2023-47211 · GHSA-85h3-wq5q-6x6j

Path traversal in ManageEngine OpManager

Priority HIGH 72

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.47024 Published 2024-01-08 No fix listed CWE-22
TI-2022-17138 CVE-2022-36923 · GHSA-hc4f-4mvr-7cv9

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…

Priority MEDIUM 43

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07666 Published 2022-08-10 No fix listed CWE-284
TI-2019-13010 CVE-2019-17421 · GHSA-xcv5-pjw7-mgp9

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine…

Priority LOW 35

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a mal…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00554 Published 2019-11-21 No fix listed CWE-276
TI-2023-05614 CVE-2023-6105 · GHSA-2jvx-3h5f-w2j7

ManageEngine Information Disclosure in Multiple Products

Priority LOW 26

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00694 Published 2023-11-15 Fixed in 14304, 7004 CWE-200
Open these records in search →