Vulnerability index

Browse CVEs

501 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Manageengine Adaudit Plus HIGH 8.1
CVE-2025-3834

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

Fix: 8.5+
Fix from $1,950 2025-05-14
Manageengine Adselfservice Plus HIGH 8.1
CVE-2025-3833EPSS 45%

Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.

Fix: 6.5+
Fix from $1,950 2025-05-14
Manageengine Servicedesk Plus MEDIUM 5.4
CVE-2024-50053

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stor…

Fix: 14.9+
Fix from $1,600 2025-03-21
Manageengine Adselfservice Plus HIGH 8.1
CVE-2025-1723

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account hol…

Fix: 6.5+
Fix from $1,950 2025-03-03
Manageengine Applications Manager MEDIUM 6.5
CVE-2024-41140

Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in the update user function.

Fix: 17.0 / 17.3+
Fix from $1,600 2025-01-29
Manageengine Analytics Plus HIGH 8.1
CVE-2024-52323

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve s…

Fix: 6.1+
Fix from $1,950 2024-11-27
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-49574

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

Fix: 8.1+
Fix from $1,950 2024-11-18
Manageengine Sharepoint Manager Plus HIGH 8.1
CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management opt…

Mitigation only
Fix from $1,950 2024-11-08
Manageengine Admanager Plus HIGH 8.8
CVE-2024-24409

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.

Mitigation only
Fix from $1,950 2024-11-08
Manageengine Endpoint Central HIGH 7.8
CVE-2024-10203

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent …

Fix: after 11.3.2428.09
Fix from $1,950 2024-11-07
Manageengine Exchange Reporter Plus HIGH 8.8
CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.

Fix: 5.7+
Fix from $1,950 2024-11-05
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-36485

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

Fix: 8.1+
Fix from $1,950 2024-11-04
Manageengine Admanager Plus HIGH 8.8
CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.

Fix: 7.2+
Fix from $1,950 2024-11-04
Manageengine Adaudit Plus HIGH 8.1
CVE-2024-5608

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

Fix: 8.1+
Fix from $1,950 2024-10-24
Manageengine Endpoint Central HIGH 8.3
CVE-2024-38868

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Cent…

Fix: 11.3.2400.15 / 11.3.2406.08+
Fix from $1,950 2024-08-30
Manageengine Exchange Reporter Plus HIGH 8.1
CVE-2024-6204

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

Fix: 5.7+
Fix from $1,950 2024-08-30
Manageengine Pam360 HIGH 8.8
CVE-2024-5546

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injec…

Mitigation only
Fix from $1,950 2024-08-28
Manageengine Servicedesk Plus MEDIUM 6.1
CVE-2024-41150

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter…

Fix: after 14.7
Fix from $1,600 2024-08-23
Manageengine Servicedesk Plus MEDIUM 5.4
CVE-2024-38869

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects En…

Fix: after 14.7
Fix from $1,600 2024-08-23
Manageengine Opmanager HIGH 8.8
CVE-2024-5466EPSS 7%

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execut…

Fix: after 12.7
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-5467

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

Fix: after 8.0
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-5490

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

Fix: 8.0+
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-5556

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

Fix: 8.0+
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-5586EPSS 5%

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

Fix: after 8.0
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-36515

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is di…

Fix: 8.0+
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-36516

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is di…

Fix: 8.0+
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-36517EPSS 5%

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

Fix: 8.0+
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-36514

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

Fix: 8.0+
Fix from $1,950 2024-08-23
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-5487

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

Fix: 8.1+
Fix from $1,950 2024-08-12
Manageengine Adaudit Plus HIGH 8.8
CVE-2024-5527

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

Fix: 8.1+
Fix from $1,950 2024-08-12