PT-2018-11526 · Zoho · Zoho Manageengine Opmanager +4

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Netflow Analyzer versions prior to build 123137 Zoho ManageEngine Network Configuration Manager versions prior to build 123128 Zoho ManageEngine OpManager versions prior to build 123148 Zoho ManageEngine OpUtils versions pri...

Zoho ManageEngine Firewall Analyzer Group Chat Arbitrary File Upload Vulnerability

Zoho ManageEngine Firewall Analyzer is a set of Web-based firewall log analysis tools from ZOHO, which collects, correlates, analyzes, and reports on logs from firewalls, proxy servers, and Radius servers throughout the enterprise.Group Chat is one of the team communication Group Chat is one of t...

CVE-2017-14123

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...

Unrestricted file upload

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...

CVE-2017-14123

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...

CVE-2017-14123

CVE-2017-14123 affects Zoho ManageEngine Firewall Analyzer 12200, where the Group Chat feature contains an unrestricted file upload vulnerability. According to the CVE description and corroborating sources, an attacker can upload files with any extensions (for example a PHP file) to trigger remot...

CVE-2017-14123

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...

ManageEngine Firewall Analyzer Detection (HTTP)

HTTP based detection of ManageEngine Firewall Analyzer. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Directory traversal

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0...

Design/Logic Flaw

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions...

CVE-2015-7780

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0...

CVE-2015-7781

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions...

CVE-2015-7780

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0...

CVE-2015-7781

CVE-2015-7781 relates to Zoho ManageEngine Firewall Analyzer prior to 8.0, where access permissions are not properly restricted. The vulnerability allows an attacker to obtain server logs due to insufficient access controls (no restriction on who can view logs). Affected software: Firewall Analyz...

CVE-2015-7780

CVE-2015-7780 affects ManageEngine Firewall Analyzer prior to version 8.0 and is described as a directory traversal/local file inclusion vulnerability. Multiple sources indicate an unauthenticated/authenticated path to read arbitrary server files via traversal, enabling potential information disc...

CVE-2015-7781

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions...

ZOHO ManageEngine Firewall Analyzer Cross-Site Scripting Vulnerability

ZOHO ManageEngine Firewall Analyzer is the United States ZhuoHao ZOHO company's set of Web-based firewall log analysis tools. A cross-site scripting vulnerability exists in ZOHO ManageEngine Firewall Analyzer version 8.5, which can be exploited by an attacker to inject arbitrary web script or HTM...

ZOHO ManageEngine Firewall Analyzer Remote Privilege Vulnerability

ZOHO ManageEngine Firewall Analyzer is the United States ZhuoHao ZOHO company's set of Web-based firewall log analysis tools. A remote privilege extraction vulnerability exists in ZOHO ManageEngine Firewall Analyzer version 8.5, which can be exploited by an attacker to gain administrator privileg...

ManageEngine Firewall Analyzer runQuery guest user SQL Injection

An SQL injection vulnerability exists in ManageEngine Firewall Analyzer. This vulnerability is due to the use of hardcoded credentials and insufficient validation of request parameters in HTTP requests to the runQuery servlet. By sending crafted requests to an affected server, a remote attacker c...

Multiple Vulnerabilities in ManageEngine Firewall Analyzer

ManageEngine Firewall Analyzer is a web-based firewall log analysis tool from Zoho that collects, correlates, and reports on enterprise-wide logs from firewalls, proxy servers, and Radius servers. Elevation of privilege and SQL injection vulnerabilities exist in ManageEngine Firewall Analyzer,...