429 matches found
Zoho ManageEngine OpManager SQL Injection (CVE-2018-18949)
An SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the mailservername. Successful exploitation could lead to arbitrary code execution in the security context of database service...
ManageEngine OpManager Privilege Escalation
Summary OpManager offers comprehensive network monitoring capabilities that help you monitor network performance, detect network faults in real time, troubleshoot errors, and prevent downtime. Being a powerful network monitor, it supports multi-vendor IT environments and can scale to fit your...
CVE-2018-20339
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
CVE-2018-20338
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
CVE-2018-20338
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
CVE-2018-20339: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
Zoho ManageEngine OpManager 12.3 Alarms Cross Site Scripting
I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20339 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...
CVE-2018-20338: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
PT-2018-15316
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows SQL injection in the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version after build...
PT-2018-15317
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows for XSS in the Notes column of the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version...
CVE-2018-20173
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
CVE-2018-20173: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
PT-2018-15286
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123238 Description The issue allows SQL injection via the "getGraphData API" endpoint. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123238, update to a version that include...
Zoho ManageEngine OpManager 12.3 Cross Site Scripting
I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123237 has XSS via the domainController API. II. CVE REFERENCE ------------------------- CVE-2018-19921 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE ------------------------...
ZOHO ManageEngine OpManager domain controller cross-site scripting vulnerability
ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. domain controller is one of the domain controller components. A cross-site scripting vulnerability exists in the domain controller in versions prior to ZOHO ManageEngine OpManager 12.3 Build...
CVE-2018-19921
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...
PT-2018-15165
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123237 Description The issue concerns a cross-site scripting XSS flaw in the domain controller of the affected software. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123237...
CVE-2018-19921: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...