CVE-2020-15927

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

PT-2019-16760 · Zoho Manageengine · Adselfservice Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions 5.x before build 5703 Description: The issue is related to a Server-Side Request Forgery SSRF in Zoho ManageEngine ADSelfService Plus. Recommendations: For versions 5.x before build 5703, update t...

Manage Engine Exchange Reporter Plus Remote Code Execution Vulnerability

Manage Engine Exchange Reporter Plus is an office software. Manage Engine Exchange Reporter Plus remote code execution vulnerability. An attacker can exploit this vulnerability to remotely execute arbitrary code...

#ManageEngine Exchange Reporter Plus Unauthenticated Remote Code Execution Exploit

This Metasploit module exploits a remote code execution vulnerability that exists in Exchange Reporter Plus versions 5310 and below, caused by execution of bcp.exe file inside ADSHACluster servlet This module requires Metasploit: https://metasploit.com/download Current source:...

Manage Engine Exchange Reporter Plus - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Manage Engine Exchange Reporter Plus Unauthenticated RCE', 'Description' = %q This module exploits a remote code execution vulnerability that...

Manage Engine Exchange Reporter Plus Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Manage Engine Exchange Reporter Plus Unauthenticated RCE', 'Description' = %q This module exploits a remote code execution vulnerability that...

ManageEngine Desktop Central Password Reset Security Bypass Vulnerability

Zohocorp Manage Engine Desktop Central is a computer and mobile device management solution from Zoho. The solution is used to manage devices such as servers, computers, cell phones and tablets in an organization. A security vulnerability exists in Zohocorp Manage Engine Desktop Central 9 build...

CVE-2015-2560

Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet...

Design/Logic Flaw

Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet...

CVE-2015-2560

CVE-2015-2560 affects ManageEngine Desktop Central 9 before build 90135. The flaw in DCOperationsServlet (addOrModifyUser) allows remote unauthenticated users to change Administrator (DCAdmin) passwords, enabling full or partial admin access. Remediation: update to build 90135 or apply vendor gui...

Manage Engine Application Manager Arbitrary Command Execution Vulnerability

ManageEngine Applications Manager is an application performance monitoring solution. An arbitrary command execution vulnerability exists in Applications Manager. An attacker can execute system commands by uploading a malicious file...

Manage Engine Network Configuration Manager Cross-Site Request Forgery Vulnerability

Network Configuration Manager is a web-based, multi-vendor Network Change, Configuration and Compliance Management NCCCM solution for switches, routers, firewalls and other network devices. A cross-site request forgery vulnerability exists in Manage Engine Network Configuration Manager Build 1100...

Manage Engine EventLog Analyzer 11.0 Build 11000 Cross Site Scripting

Multiple Cross Site Scripting Attack - ManageEngine EventLog Analyzer v.11.0 Build 11000 Overview----------------------------------------------------------------------------------------------------------------------------- Vendor: Manage Engine Vulnerable Product: EventLog Analyzer v.11.0 Build...

Manage Engine Desktop Central 9.1.0 Build 91099 XSS

Overview----------------------------------------------------------------------------------------------------------------------------- Vendor: Manage Engine Vulnerable Product: Desktop Central v.9.1.0 Build 91099 Vulnerability Type : Reflected Cross Site Scripting Vulnerability Vulnerable Version ...

Manage Engine OPutils 8.0 Cross Site Request Forgery / Cross Site Scripting

================================================== CSRF and XsS In Manage Engine oputils ================================================== . contents:: Table Of Content Overview ======== Title : CSRF and XSS In Manage Engine OPutils Author: Kaustubh G. Padwad Plugin Homepage:...

Manage Engine Applications Manager 12 Multiple Vulnerabilities

Summary ManageEngine Applications Manager is an application performance monitoring solution that proactively monitors business applications and help businesses ensure their revenue-critical applications meet end user expectations. Applications Manager offers out-of-the-box monitoring support for...

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1501 Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID:...

Manage Engine Desktop Central 9 - CVE-2015-2560 - Unauthorised administrative password reset

A vulnerability exists in the Manage Engine Desktop Central 9 application that affects version build 90130. This may affect earlier releases as well. The vulnerability allows a remote unauthenticated user to change the password of any Manage Engine Desktop Central user with the ‘Administrator’ ro...

Reflected XSS Vulnerability in XSS In Manage Engine Device Expert

=============================================================================== Reflected XSS Vulnerability in XSS In Manage Engine Device Expert =============================================================================== . contents:: Table Of Content Overview ======== Title :Reflected XSS...

CSRF/XSS In Manage Engine Asset Explorer

=============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of Content Overview ======== Title :CSRF/Stored XSS...