5174 matches found
ManageEngine Endpoint Central < 11.3.2416.22 , 11.3.2428.x < 11.3.2428.10, 11.3.2435.x < 11.3.2435.1 Arbitrary File Deletion vulnerability
The version of ManageEngine Endpoint Central installed on the remote Windows host is either prior to 11.3.2416.22, 11.3.2428.10 or 11.3.2435.1. It is,therefore, affected by a Arbitrary File Deletion vulnerability. For more information, consult the vendor advisory. Note that Nessus has not tested...
CVE-2024-10839
Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...
CVE-2024-10839
Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...
CVE-2024-10839
CVE-2024-10839 affects Zohocorp/ManageEngine SharePoint Manager Plus (versions 4503 and prior). The vulnerability is an authenticated XML External Entity (XXE) issue in the Management option. Impact is described as high confidentiality impact and partial availability impact per the NVD metrics. N...
CVE-2024-10839 XML External Entity
Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...
CVE-2024-10839 XML External Entity
Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...
CVE-2024-24409
Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...
CVE-2024-24409 Privilege Escalation
Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...
CVE-2024-24409
CVE-2024-24409 affects Zohocorp ManageEngine ADManager Plus versions 7203 and earlier, with a Privilege Escalation in the Modify Computers option. The issue enables elevation of privilege by manipulating computer object attributes (e.g., userAccountControl/msDS-AllowedToDelegateTo) when a technic...
CVE-2024-10203
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203 Agent Arbitrary File Deletion
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203 Agent Arbitrary File Deletion
Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...
CVE-2024-10203
CVE-2024-10203 affects Zohocorp/ManageEngine Endpoint Central. Vulnerable components are the Endpoint Central agent on Windows machines, with version ranges 11.3.2416.21 and below and 11.3.2428.9 and below. root cause is described as insecure privilege management that enables Arbitrary File Delet...
ManageEngine ADAudit Plus < Build 7250 SQL Injection
The version of ManageEngine ADAudit Plus installed on the remote host is prior to 7.2, Build 7250. It is, therefore, affected by SQL injection vulnerability. - Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. CVE-2024-48878 Not...
CVE-2024-9459
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
CVE-2024-9459
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
CVE-2024-9459 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
CVE-2024-9459
CVE-2024-9459 affects Zoho ManageEngine Exchange Reporter Plus up through version 5718 and earlier. The security issue is described as an authenticated SQL Injection in the reports module. The connected sources specifically list the affected software and version range, with remediation guidance r...