Zoho Manageengine Eventlog Analyzer Vulnerabilità

Sequenza temporale

Versione

11.0 Build 11000	2
10.0	2
10.1	2
10.2	2
10.3	2

Contromisure

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

Sfruttabilità

High	4
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	10

Accesso al vettore

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	14

Autenticazione

Not Defined	0
High	0
Low	2
None	12

Interazione dell'utente

Not Defined	0
Required	6
None	8

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	4
≤7	2
≤8	4
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	2
≤7	2
≤8	4
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	2
≤7	0
≤8	4
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	0
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	6
<2k	4
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	14
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Versions (25): 6.1, 9.0, 10.0, 10.0 SP1, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 11.0, 11.0 Build 11000, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 11.7, 11.8, 11.9, 11.10, 11.11, 11.12, 12147

Link to Product Website: https://www.manageengine.com/

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
30/04/2021	7.3	7.3	Zoho ManageEngine EventLog Analyzer ZIP Archive directory traversal	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-28959
13/12/2019	6.5	6.4	Zoho ManageEngine EventLog Analyzer runquery.do MD5 rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-19774
18/06/2019	6.5	6.5	Zoho ManageEngine Desktop Central Permission sc.exe escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-12133
02/07/2018	5.7	5.7	Zoho ManageEngine EventLog Analyzer Search Box cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-10076
02/07/2018	5.7	5.7	Zoho ManageEngine EventLog Analyzer Logs cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-10075
15/03/2018	5.2	4.9	Zoho ManageEngine EventLog Analyzer Stored cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-8721
13/03/2018	5.7	5.4	Zoho ManageEngine EventLog Analyzer cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-7405
28/09/2015	7.3	7.3	Zoho ManageEngine EventLog Analyzer runQuery.do sql injection	$0-$5k	$0-$5k	High	Not Defined	0.00	CVE-2015-7387
26/10/2014	7.3	7.3	Zoho ManageEngine EventLog Analyzer Upload Servlet directory traversal	$0-$5k	$0-$5k	High	Official Fix	0.00	CVE-2014-6037
11/09/2014	6.3	6.0	Zoho ManageEngine EventLog Analyzer Eventlog escalazione di privilegi	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	CVE-2014-6043

4 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 4 results.

altre voci di Zoho Manageengine

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!