Vulnerabilities

TI-2016-07756 CVE-2016-9490 · GHSA-jm36-8m9x-wq28

ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability

LOW 31

ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01697 Published 2018-06-05 No fix listed CWE-79

TI-2016-07754 CVE-2016-9488 · GHSA-chxq-hg75-w349

ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities

MEDIUM 50

ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04617 Published 2018-06-05 No fix listed CWE-89

TI-2012-00971 CVE-2012-1063 · GHSA-868w-34vr-f4r2

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x…

LOW 35

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01188 Published 2012-02-14 No fix listed CWE-89

TI-2012-00970 CVE-2012-1062 · GHSA-8v22-r255-jc2m

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01312 Published 2012-02-14 No fix listed CWE-79

TI-2008-01500 CVE-2008-1566 · GHSA-r9w7-3xm2-f9rp

Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications…

LOW 22

Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-03-31 No fix listed CWE-79

TI-2008-00451 CVE-2008-0476 · GHSA-f286-r7gg-78m6

ManageEngine Applications Manager 8.1 build 8100 does not check authentication for…

LOW 31

ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspeci…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01248 Published 2008-01-29 No fix listed CWE-287

TI-2008-00450 CVE-2008-0475 · GHSA-22v5-h5m8-j4hf

ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain…

LOW 25

ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home->Summary) via an invalid URI, as demonstrated by the "/-" URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01205 Published 2008-01-29 No fix listed CWE-20

TI-2008-00449 CVE-2008-0474 · GHSA-27xx-mxf2-ph5m

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arbitrary web script or HTML via the (1) showlink parameter to jsp/DiscoveryProfile…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01446 Published 2008-01-29 No fix listed CWE-79

Vulnerabilities

Filters