6092 matches found
PT-2024-21813 · Zohocorp · Manageengine Ddi Central
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine DDI Central versions 4001 and prior Description: The issue allows a user to upload new files to the server folder due to a directory traversal vulnerability. Recommendations: For versions 4001 and prior, consider...
CVE-2024-38870: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module...
PT-2024-36406 · Zohocorp · Manageengine Ddi Central
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine DDI Central versions 4001 and prior Description: The issue is related to an agent takeover vulnerability due to the presence of hard-coded sensitive keys. Recommendations: For versions 4001 and prior, consider restrictin...
CVE-2024-27311: Unrestricted Upload of File with Dangerous Type
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...
CVE-2024-5471: Use of Hard-coded Credentials
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...
PT-2024-5296
Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below Description The issue is related to the monitoring module of Zohocorp ManageEngine Exchange Reporter Plus, where the software fails to properly protect the SQL query structur...
PT-2024-7934
Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below Zohocorp ManageEngine EndPoint Central versions 11.3.2428.9 and below Description The issue is related to arbitrary file deletion in the agent installed machines due to...
VulnCheck KEV: CVE-2023-38743
Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...
ManageEngine OpManager XSS (CVE-2024-36038)
A cross-side scripting vulnerability exists in the configured proxy server for ManageEngine OpManager 12.8.234. A attacker can use this vulnerability to alter the intended functionality of the proxy server, potentially leading to credentials disclosure within a trusted session. Note that Nessus h...
CVE-2024-36038
Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...
CVE-2024-36038
CVE-2024-36038 relates to a stored cross-site scripting vulnerability in the proxy server option of Zoho ManageEngine ITOM/OpManager. Affected software: OpManager 12.8.234 with proxy server configuration; affected version range cited as 128234–128248. Root cause: stored XSS in the proxy server fu...
CVE-2024-36038 Stored XSS
Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...
CVE-2024-36038 Stored XSS
Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...
CVE-2024-36038: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...
ZOHO ManageEngine ITOM Cross-Site Scripting Vulnerability
ZOHO ManageEngine ITOM is a network management software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine ITOM that stems from a stored cross-site scripting vulnerability...
PT-2024-6547 · Zohocorp · Manageengine Pam360 +1
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Password Manager Pro versions before 12431 Zohocorp ManageEngine PAM360 versions before 7001 Description: The issue exists due to the failure to neutralize special elements used in an operating system command, allowing a...
CVE-2024-27313
Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...
CVE-2024-27313
Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...