CVE-2020-11527

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...

CVE-2020-11527

The CVE-2020-11527 vulnerability affects Zoho ManageEngine OpManager before version 12.4.181. Multiple connected sources corroborate that an unauthenticated remote attacker can trigger a specially crafted URI to read arbitrary files, indicating an information disclosure risk. The Red Hat advisory...

CVE-2020-11527

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...

CVE-2020-11518

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution...

CVE-2020-11518

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution...

Remote code execution

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution...

CVE-2020-11518

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution...

CVE-2020-11518

CVE-2020-11518 affects Zoho ManageEngine ADSelfService Plus up to version 5815, allowing unauthenticated remote code execution. This is documented in multiple sources (NVD entry stating ADSelfService Plus before 5815 allows unauthenticated RCE; Red Hat and CNVD entries reiterate the same). The vu...

CVE-2020-11527: Undefined Security Weakness

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...

CVE-2020-11518: Undefined Security Weakness

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution...

PT-2020-12664

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.4.181 Description The issue allows an unauthenticated remote attacker to read arbitrary files by sending a specially crafted URI. Recommendations For versions prior to 12.4.181, update to versio...

PT-2020-12661

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 5815 Description The issue allows unauthenticated remote code execution. There have been reports of real-world incidents where this issue was exploited, including a case where an individual...

ManageEngine Desktop Central < 10 Build 10.0.515 Information Disclosure

The ManageEngine Desktop Central application running on the remote host is prior to version 10 build 10.0.515. It is, therefore, affected by an information disclosure vulnerability in the PDFGenerationServlet component due to improper access controls. An unauthenticated, remote attacker can explo...

Zoho ManageEngine Desktop Central Information Disclosure Vulnerability (CNVD-2020-20678)

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An information...

CVE-2020-8509

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure...

Information disclosure

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure...

CVE-2020-8509

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure...

CVE-2020-8509

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure...

CVE-2020-8509

CVE-2020-8509 affects ManageEngine Desktop Central prior to 10.0.515, with an information disclosure in the PDFGenerationServlet due to improper access controls. An unauthenticated, remote attacker can access the servlet and disclose potentially sensitive information. The Nessus plugin confirms t...

CVE-2020-8509: Missing Authentication for Critical Function

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure...