302 matches found
Zoho Corporation ManageEngine OpManager 授权问题漏洞
Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88240)
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
CVE-2021-40493
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
CVE-2021-41288
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
CVE-2021-41288
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
CVE-2021-41288
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
CVE-2020-19554
Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...
CVE-2020-19554
Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...
ManageEngine OpManager SumPDU Java Deserialization
An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager component can be leveraged to deserialize an arbitrary Java object. This can be abused by an unauthenticated remote attacker to execute OS commands in the context of the OpManager application NT AUTHORITY\SYSTEM on Windows ...
CVE-2021-3287
Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...
CVE-2021-3287
Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...
PT-2021-19972 · Zoho · Zoho Manageengine Opmanager
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 12.5.329 Description: The issue allows unauthenticated remote code execution due to a general bypass in the deserialization class. This could potentially lead to exposure of sensitive data or...
Zoho ManageEngine OpManager 代码问题漏洞
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
ManageEngine OpManager Smart Update Manager RCE
Binary data manageengineopmanagercve-2020-28653.nbin...
Zoho Corporation Manage Engine OpManager Path Traversal Vulnerability
Zoho Corporation ManageEngine OpManager is an application from Zoho Corporation, India. Continuously monitors the network and provides in-depth visibility and control over it. A path traversal vulnerability exists in Zoho Corporation Manage Engine OpManager, which can be exploited by an attacker ...