Browse CVEs

CRITICAL 9.8 CVE-2021-44675EPSS 6% Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which… Manageengine Servicedesk Plus Msp after 10.5 Fix from $2,3002021-12-20 CRITICAL 9.8 CVE-2021-44676 Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects o… Manageengine Access Manager Plus Mitigation only Fix from $2,3002021-12-20 CRITICAL 9.8 CVE-2021-44515 KEVEPSS 100% Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in… Manageengine Desktop Central 10.1.2127.18 / 10.1.2137.3+ Fix from $2,3002021-12-12 CRITICAL 9.8 CVE-2021-44514EPSS 5% OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories. Manageengine Opmanager Mitigation only Fix from $2,3002021-12-09 CRITICAL 9.8 CVE-2021-43319EPSS 21% Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality. Manageengine Network Configuration Manager Mitigation only Fix from $2,3002021-11-30 HIGH 7.5 CVE-2021-43296 Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor. Manageengine Supportcenter Plus Mitigation only Fix from $1,9502021-11-30 MEDIUM 6.1 CVE-2021-43295 Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module. Manageengine Supportcenter Plus Mitigation only Fix from $1,6002021-11-30 CRITICAL 9.8 CVE-2021-42099EPSS 7% Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution. Manageengine M365 Manager Plus Mitigation only Fix from $2,3002021-11-30 MEDIUM 6.1 CVE-2021-43294 Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module. Manageengine Supportcenter Plus Mitigation only Fix from $1,6002021-11-30 CRITICAL 9.8 CVE-2021-44077 KEVEPSS 93% Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthentic… Manageengine Servicedesk Plus 10.5 / 11.0+ Fix from $2,3002021-11-29 HIGH 7.8 CVE-2021-42954 Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is v… Manageengine Remote Access Plus 10.1.2121.1+ Fix from $1,9502021-11-17 HIGH 7.8 CVE-2021-42955 Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because… Manageengine Remote Access Plus 10.1.2132+ Fix from $1,9502021-11-17 CRITICAL 9.8 CVE-2021-41080 Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search. Manageengine Network Configuration Manager 12.5+ Fix from $2,3002021-11-11 CRITICAL 9.8 CVE-2021-41081EPSS 63% Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search. Manageengine Network Configuration Manager 12.5+ Fix from $2,3002021-11-11 CRITICAL 9.8 CVE-2021-41833EPSS 8% Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution. Manageengine Patch Connect Plus 9.0.0+ Fix from $2,3002021-11-11 CRITICAL 9.8 CVE-2021-42002EPSS 7% Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-11-11 CRITICAL 9.8 CVE-2021-42847EPSS 70% Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files. Manageengine Adaudit Plus 7.0+ Fix from $2,3002021-11-11 CRITICAL 9.8 CVE-2020-24743 An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resou… Manageengine Applications Manager 14.5+ Fix from $2,3002021-11-03 CRITICAL 9.8 CVE-2021-20136EPSS 10% ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthentica… Manageengine Log360 after 5.2 Fix from $2,3002021-11-01 MEDIUM 6.5 CVE-2021-35512 An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200. Manageengine Applications Manager No fix yet Fix from $1,6002021-10-21 CRITICAL 9.8 CVE-2021-40493EPSS 50% Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject paramet… Manageengine Opmanager 12.5+ Fix from $2,3002021-10-13 CRITICAL 9.8 CVE-2021-41075 The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API. Manageengine Opmanager 12.5+ Fix from $2,3002021-10-13 HIGH 8.8 CVE-2021-20130EPSS 33% ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in… Manageengine Admanager Plus 7.1+ Fix from $1,9502021-10-13 HIGH 8.8 CVE-2021-20131EPSS 17% ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in… Manageengine Admanager Plus 7.1+ Fix from $1,9502021-10-13 CRITICAL 9.8 CVE-2021-38298 Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-10-07 CRITICAL 9.8 CVE-2021-37762EPSS 8% Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-10-07 CRITICAL 9.8 CVE-2021-37918EPSS 74% Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-10-07 CRITICAL 9.8 CVE-2021-37919EPSS 11% Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-10-07 CRITICAL 9.8 CVE-2021-37920EPSS 11% Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-10-07 CRITICAL 9.8 CVE-2021-37921EPSS 11% Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. Manageengine Admanager Plus 7.1+ Fix from $2,3002021-10-07