Zoho Manageengine Vulnerabilità

Sequenza temporale

Affected Products (42): ADAudit (1), ADAudit Plus (1), ADManager Plus (7), AD Manager Plus (1), ADSelfService Plus (22), Application Manager (5), Applications Manager (38), Asset Explorer (1), AssetExplorer (12), DataSecurity Plus (4), DesktopCentral (1), Desktop Central (34), Desktop Central MSP (1), Device Expert (1), Event Log Analyzer (3), EventLog Analyzer (13), Exchange Reporter Plus (1), FireWall (1), Firewall Analyzer (11), Log Analyzer (2), ManageEngine Netflow Analyzer (4), ManageEngine OpManager (9), Mobile Device Manager Plus (1), Monitoring Manager (3), NetFlow Analyzer (2), Netflow Analyzer (6), Netflow Analyzer Professional (7), Network Configuration Manager (4), O365 Manager Plus (1), OpManager (38), OpStor (2), OpUtils (4), Password Manager Pro (18), Patch Connect Plus (1), Patch Manager Plus (1), Recovery Manager Plus (1), Remote Access Plus (4), ServiceDesk (3), ServiceDesk Plus (29), Service Plus (1), SupportCenter Plus (6), Vulnerability Manager Plus (1)

Link to Vendor Website: https://www.manageengine.com/

Data di pubblicazione	Base	Temp	Vulnerabilità	Prod	Exp	Con	CTI	CVE
20/02/2021	6.2	6.2	Zoho ManageEngine ADSelfService Plus Administrative Interface escalazione di privilegi	Sconosciuto	Not Defined	Not Defined	1.55	CVE-2021-27214
05/02/2021	7.5	7.5	Zoho ManageEngine Applications Manager com.adventnet.appmanager.filter.UriCollector showresource.do sql injection	Log Management Software	Not Defined	Not Defined	0.06	CVE-2020-35765
04/02/2021	6.3	6.3	Zoho ManageEngine Remote Access Plus User Administration Screen escalazione di privilegi	Remote Access Software	Not Defined	Not Defined	0.00	CVE-2019-16268
03/02/2021	6.3	6.0	Zoho ManageEngine OpManager Smart Update Manager Servlet Remote Privilege Escalation	Network Management Software	Not Defined	Official Fix	0.06	CVE-2020-28653
19/01/2021	7.5	7.2	Zoho ManageEngine Applications Manager sql injection	Log Management Software	Not Defined	Official Fix	0.06	CVE-2020-27733
07/01/2021	5.5	5.5	Zoho ManageEngine Desktop Central New Custom Report escalazione di privilegi	Endpoint Management Software	Not Defined	Not Defined	0.05	CVE-2019-16962
30/10/2020	7.6	7.3	Zoho ManageEngine Applications Manager MyPage.do sql injection	Log Management Software	Not Defined	Official Fix	0.02	CVE-2020-27995
09/10/2020	7.4	7.4	Zoho ManageEngine Applications Manager AAMRequestProcessor Servlet escalazione di privilegi	Log Management Software	Proof-of-Concept	Not Defined	0.06	CVE-2020-10816
07/10/2020	7.5	7.2	Zoho ManageEngine Applications Manager RCA module sql injection	Log Management Software	Not Defined	Official Fix	0.07	CVE-2020-16267
07/10/2020	7.5	7.2	Zoho ManageEngine Applications Manager SAP Module sql injection	Log Management Software	Not Defined	Official Fix	0.06	CVE-2020-15927
02/10/2020	6.2	6.2	Zoho ManageEngine Desktop Central InternetSendRequestEx buffer overflow	Endpoint Management Software	Not Defined	Not Defined	0.04	CVE-2020-24397
02/10/2020	7.0	7.0	Zoho ManageEngine Desktop Central TLS Certificate Validation InternetSendRequestByBitrate autenticazione debole	Endpoint Management Software	Not Defined	Not Defined	0.04	CVE-2020-15589
01/10/2020	8.5	8.5	Zoho ManageEngine Application Manager AlarmEscalation sql injection	Sconosciuto	Not Defined	Not Defined	0.00	CVE-2020-15533
30/09/2020	8.5	8.2	Zoho ManageEngine ADSelfService Plus GINA CP Module escalazione di privilegi	Sconosciuto	Not Defined	Official Fix	0.06	CVE-2018-5353
25/09/2020	5.2	4.9	Zoho ManageEngine Applications Manager header.jsp cross site scripting	Log Management Software	Not Defined	Official Fix	0.05	CVE-2020-15521
25/09/2020	8.5	8.2	Zoho ManageEngine Applications Manager REST API sql injection	Log Management Software	Not Defined	Official Fix	0.06	CVE-2020-15394
04/09/2020	6.7	6.7	Zoho ManageEngine Applications Manager jar escalazione di privilegi	Log Management Software	Not Defined	Not Defined	0.00	CVE-2020-14008
31/08/2020	8.5	8.2	Zoho ManageEngine Exchange Reporter Plus autenticazione debole	Reporting Software	Not Defined	Official Fix	0.05	CVE-2020-24786
29/07/2020	8.0	7.7	Zoho ManageEngine Desktop Central Header buffer overflow	Endpoint Management Software	Not Defined	Official Fix	0.05	CVE-2020-15588
12/06/2020	7.4	7.1	Zoho ManageEngine ServiceDesk Plus autenticazione debole	Sconosciuto	Not Defined	Official Fix	0.10	CVE-2020-14048
04/06/2020	7.4	7.4	Zoho ManageEngine OpManager cachestart directory traversal	Network Management Software	Not Defined	Not Defined	0.02	CVE-2020-13818
18/05/2020	5.4	5.1	Zoho ManageEngine Service Plus Password rivelazione di un 'informazione	Sconosciuto	Not Defined	Official Fix	0.03	CVE-2020-13154
14/05/2020	5.2	4.9	Zoho ManageEngine ServiceDesk Plus Asset cross site scripting	Sconosciuto	Proof-of-Concept	Official Fix	0.05	CVE-2019-15083
08/05/2020	8.5	8.2	Zoho ManageEngine DataSecurity Plus DataEngine Xnode Server autenticazione debole	Sconosciuto	Not Defined	Official Fix	0.00	CVE-2020-11532
08/05/2020	7.5	7.2	Zoho ManageEngine DataSecurity Plus DataEngine Xnode Server Application directory traversal	Sconosciuto	Not Defined	Official Fix	0.00	CVE-2020-11531

Zoho Manageengine Vulnerabilità

Sequenza temporale

genere »

Prodotto »

Contromisure »

Sfruttabilità »

Accesso al vettore »

Autenticazione »

Interazione dell'utente »

C3BM Index »

CVSSv3 Base »

CVSSv3 Temp »

VulDB »

NVD »

Fornitore »

Research »

Exploiter 0 giorni »

Exploiter aujourd'hui »

Sfrutta il volume del mercato »

🔴 CTI Attività »

🔒 Login Required

Do you need the next level of professionalism?