Read the docs

Zohocorp

Records612All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high245CVSS 7.0–8.9

Exploited now

Zohocorp records in CISA KEV
TI-2022-11432 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Priority CRITICAL 89KEV 2023-03-07TI-2022-23765 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-01-23TI-2022-15981 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-09-22TI-2021-20117 Zoho Desktop Central Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-10TI-2021-15358 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-12-01TI-2021-19808 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Manageengine Applications Manager 56 records HIGH Manageengine Opmanager 56 records CRITICAL Manageengine Admanager Plus 53 records CRITICAL Manageengine Adaudit Plus 52 records CRITICAL Manageengine Adselfservice Plus 51 records CRITICAL Manageengine Servicedesk Plus 50 records CRITICAL Manageengine Desktop Central 48 records CRITICAL Manageengine Supportcenter Plus 31 records CRITICAL

Records

9 records in Manageengine It360 · all components

TI-2014-06537 CVE-2014-7868 · GHSA-9gvw-7mjf-3xwg

Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4…

Priority HIGH 71

Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.73323 Published 2014-12-04 No fix listed CWE-89
TI-2014-04982 CVE-2014-6034 · GHSA-4jr7-wrr7-7q7v

Directory traversal vulnerability in the…

Priority MEDIUM 63

Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.78954 Published 2014-12-04 No fix listed CWE-22
TI-2014-06536 CVE-2014-7867 · GHSA-h2cx-h57v-qrc4

SQL injection vulnerability in the…

Priority MEDIUM 60

SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allows remote attackers or…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.39928 Published 2014-12-04 No fix listed CWE-89
TI-2014-04984 CVE-2014-6036 · GHSA-wmvj-cgjh-x2px

Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine…

Priority MEDIUM 55

Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows remote attackers or remote authenticated us…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.36267 Published 2014-12-04 No fix listed CWE-22
TI-2014-03260 CVE-2014-3997 · GHSA-72w4-9phv-wp38

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password…

Priority MEDIUM 47

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition 5 through 7 build 7003, IT360 and IT360 Managed Servi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13052 Published 2014-12-05 No fix listed CWE-89
Open these records in search →