6092 matches found
CVE-2024-5586
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option...
CVE-2024-5556
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module...
CVE-2024-5467
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...
CVE-2024-5467
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...
CVE-2024-36516
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36515, both of which have affected ADAudit Plus' dashboard...
CVE-2024-36515
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36516, both of which have affected ADAudit Plus' dashboard...
CVE-2024-36517
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...
CVE-2024-36517
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...
CVE-2024-36514
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option...
CVE-2024-36514
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option...
CVE-2024-41150
CVE-2024-41150 : Stored XSS in the request module affects ManageEngine ServiceDesk Plus (up to 14810), ServiceDesk Plus MSP (up to 14800), and SupportCenter Plus (up to 14800). Root cause: stored XSS via the request module. SDP remediation per PTSecurity suggests upgrading to 14820; for MSP and S...
CVE-2024-41150 Stored XSS
An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800...
CVE-2024-41150 Stored XSS
An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800...
CVE-2024-38869
CVE-2024-38869 (Zoho ManageEngine) is tied to an incorrect authorization weakness that enables a stored cross-site scripting (XSS) vulnerability in remote office deployment configurations. Concrete details from PT-2024-6653 indicate affected products and versions include Endpoint Central before 1...
CVE-2024-38869 Incorrect Authorization
Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25...
CVE-2024-5556
Summary: CVE-2024-5556 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The vulnerability is an authenticated SQL injection in the reports module . Affected component/versions: ADAudit Plus
CVE-2024-5556 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module...
CVE-2024-5490 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...