5168 matches found
CVE-2018-18980
CVE-2018-18980 is an XML External Entity (XXE) vulnerability affecting Zoho ManageEngine Network Configuration Manager and OpManager prior to 12.3.214. The issue arises in the RequestXML parameter processed by a /devices/ProcessRequest.do GET request, which could cause the transmission of local f...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2018-22525 )
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A SQL injection vulnerability exists in Zoho ManageEngine OpManager version 123222 prior to 12.3, which can be exploited by an attacker to obtain sensitive information about a database...
Zoho ManageEngine Network Configuration Manager and OpManager XML External Entity Injection Vulnerability
ZOHO ManageEngine Network Configuration Manager and OpManager are both products of ZOHO Inc. ZOHO ManageEngine Network Configuration Manager is a suite of network configuration management, network change and configuration management NCCM software for configuring switches, routers, firewalls and...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
Sql injection
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949
CVE-2018-18949 affects Zoho ManageEngine OpManager 12.3 prior to build 123222. The vulnerability is a SQL injection via Mail Server settings caused by insufficient validation of the mailservername, enabling an attacker to breach the database security context. Impact is described as high/critical ...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability (CNVD-2018-22338)
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...
CVE-2018-18475
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...
Unrestricted file upload
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...
CVE-2018-18475
Zoho ManageEngine OpManager is affected by CVE-2018-18475: prior to 12.3 build 123214, the product allows unrestricted arbitrary file upload due to insufficient validation of uploaded images. The vulnerability stems from an inadequate check during file upload, enabling an attacker to upload arbit...
Zoho ManageEngine OpManager Arbitrary File Upload Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be successfully exploited to allow remote code execution on the target host...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
Cross site scripting
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 prior to build 123214 is affected by a cross-site scripting (XSS) vulnerability. The CVE-2018-18262 entry is supported by multiple sources (NVD, CVE records, CNVD/PRION) confirming XSS in OpManager 12.3. The available documents do not provide details on the specif...
