CVE-2024-10839: Improper Restriction of XML External Entity Reference

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

ZOHO ManageEngine SharePoint Manager Plus权限提升漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An elevation of privilege vulnerability exists in versions of ZOHO ManageEngine SharePoint Manager Plus prior to 4329, which could be exploited by an attacker to cause sensitive data to be...

CVE-2022-24305: Undefined Security Weakness

Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation...

CVE-2022-24306: Incorrect Authorization

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

PT-2022-16595

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SharePoint Manager Plus versions prior to 4329 Description The issue is related to authorization being mishandled, which allows for account takeover. Recommendations For versions prior to 4329, update to version 4329 or later...