CVE-2015-7781

CVE-2015-7781 relates to Zoho ManageEngine Firewall Analyzer prior to 8.0, where access permissions are not properly restricted. The vulnerability allows an attacker to obtain server logs due to insufficient access controls (no restriction on who can view logs). Affected software: Firewall Analyz...

CVE-2015-7780

CVE-2015-7780 affects ManageEngine Firewall Analyzer prior to version 8.0 and is described as a directory traversal/local file inclusion vulnerability. Multiple sources indicate an unauthenticated/authenticated path to read arbitrary server files via traversal, enabling potential information disc...

CVE-2015-7781: Undefined Security Weakness

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions...

CVE-2015-7780: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0...

PT-2017-7272

Name of the Vulnerable Software and Affected Versions ManageEngine Firewall Analyzer versions prior to 8.0 Description A directory traversal issue exists, allowing unauthorized access to sensitive files and directories. Recommendations For versions prior to 8.0, update to version 8.0 or later to...

PT-2017-7273

Name of the Vulnerable Software and Affected Versions ManageEngine Firewall Analyzer versions prior to 8.0 Description The issue is related to access permissions not being properly restricted. Recommendations For versions prior to 8.0, update to version 8.0 or later to resolve the issue...

ZOHO ManageEngine Firewall Analyzer Cross-Site Scripting Vulnerability

ZOHO ManageEngine Firewall Analyzer is the United States ZhuoHao ZOHO company's set of Web-based firewall log analysis tools. A cross-site scripting vulnerability exists in ZOHO ManageEngine Firewall Analyzer version 8.5, which can be exploited by an attacker to inject arbitrary web script or HTM...

ZOHO ManageEngine Firewall Analyzer Remote Privilege Vulnerability

ZOHO ManageEngine Firewall Analyzer is the United States ZhuoHao ZOHO company's set of Web-based firewall log analysis tools. A remote privilege extraction vulnerability exists in ZOHO ManageEngine Firewall Analyzer version 8.5, which can be exploited by an attacker to gain administrator privileg...

ManageEngine Firewall Analyzer runQuery guest user SQL Injection

An SQL injection vulnerability exists in ManageEngine Firewall Analyzer. This vulnerability is due to the use of hardcoded credentials and insufficient validation of request parameters in HTTP requests to the runQuery servlet. By sending crafted requests to an affected server, a remote attacker c...

Multiple Vulnerabilities in ManageEngine Firewall Analyzer

ManageEngine Firewall Analyzer is a web-based firewall log analysis tool from Zoho that collects, correlates, and reports on enterprise-wide logs from firewalls, proxy servers, and Radius servers. Elevation of privilege and SQL injection vulnerabilities exist in ManageEngine Firewall Analyzer,...

ManageEngine Firewall Analyzer Detection

Binary data manageenginefirewallanalyzerdetect.nbin...

ManageEngine Firewall Analyzer < 12.0 Multiple Vulnerabilities

The version of ManageEngine Firewall Analyzer running on the remote web server is prior to 12.0. It is, therefore, affected by multiple vulnerabilities : - A SQL injection vulnerability exists in the runQuery.do script due to improper sanitization of user-supplied input to the 'RunQuerycommand'...

ManageEngine Firewall Analyzer Multiple XSS

The ManageEngine Firewall Analyzer running on the remote web server is affected by multiple cross-site scripting XSS vulnerabilities due to improper validation of user-supplied input. A remote attacker can exploit these vulnerabilities to execute arbitrary script code in a user's browser session...

ManageEngine Firewall Analyzer Default Credentials

The remote ManageEngine Firewall web administration interface uses a known set of hard-coded default credentials. An attacker can exploit this to gain administrative access to the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

ManageEngine Firewall Analyzer 'runQuery.do' SQL Injection Vulnerability

ZOHO ManageEngine Firewall Analyzer is a web-based firewall log analysis tool from ZOHO that collects, correlates, and reports on enterprise-wide logs from firewalls, proxy servers, and Radius servers. A SQL injection vulnerability exists in ZOHO ManageEngine Firewall Analyzer, which stems from t...

ManageEngine Firewall Analyzer 8.5 SP-5.0 Cross Site Scripting

ManageEngine Firewall Analyzer 8.5 SP-5.0 Multiple XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 8.5 SP-5.0 Build 8500 Summary: ManageEngine Firewall Analyzer is an agent-less log analytics and configuration management...

ManageEngine Firewall Analyzer 8.5 SQL Injection

================================================================ ManageEngine Firewall Analyzer 8.5 SQL Query Execution Vulnerability ================================================================ Description : Vulnerability Type : ManageEngine Firewall Analyzer 8.5 SQL Query Execution...

ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities

ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities ================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type :...

ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities

Exploit for windows platform in category web applications ================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type :...

ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities

================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type : Privilege Escalation Vulnerability Vulnerable Version : 8.5...