Lucene search
+L

6067 matches found

CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•14 views

ZOHO ManageEngine OpManager 安全漏洞

ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO. It is used to manage routers, firewalls, servers, switches and printers. A cross-site scripting vulnerability exists in ZOHO ManageEngine OpManager, no detailed vulnerability details are available at this time...

6.5CVSS5.9AI score0.00422EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•16 views

PT-2025-46318

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below Description The software contains a Stored Cross-Site Scripting XSS issue within the Folder Message Count and Size report. This allows for the injection of malicious scripts...

7.3CVSS5.6AI score0.00489EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•4 views

CVE-2025-8324: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration...

9.8CVSS5.8AI score0.01745EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•1 views

CVE-2025-7633: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report...

7.3CVSS5.7AI score0.00494EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•16 views

PT-2025-46336

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature...

8.8CVSS7.6AI score0.04242EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•1 views

CVE-2025-7430: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report...

7.3CVSS5.7AI score0.00489EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•1 views

CVE-2025-7632: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report...

7.3CVSS5.7AI score0.00489EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•22 views

PT-2025-46311

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions 5723 and below Description The software is susceptible to a Stored Cross-Site Scripting XSS issue present in the Mails Deleted or Moved report. This allows for the injection of malicious scripts tha...

7.3CVSS5.6AI score0.00489EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•14 views

ZOHO ManageEngine Exchange reporter Plus 安全漏洞

ZOHO ManageEngine Exchange reporter Plus is a Web-based Microsoft Exchange reporting, auditing and monitoring software from ZOHO. A cross-site scripting vulnerability exists in ZOHO ManageEngine Exchange reporter Plus, which can be exploited by an attacker to create privileged accounts and gain...

7.3CVSS6AI score0.00489EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•17 views

ZOHO ManageEngine Exchange reporter Plus 安全漏洞

ZOHO ManageEngine Exchange reporter Plus is a Web-based Microsoft Exchange reporting, auditing and monitoring software from ZOHO. A cross-site scripting vulnerability exists in ZOHO ManageEngine Exchange reporter Plus, which can be exploited by an attacker to create privileged accounts and gain...

7.3CVSS6AI score0.00494EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•1 views

CVE-2025-9227: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor...

6.5CVSS5.7AI score0.00422EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•20 views

PT-2025-46335

Name of the Vulnerable Software and Affected Versions ManageEngine Analytics Plus versions 6170 and below Description ManageEngine Analytics Plus versions 6170 and below are susceptible to an Unauthenticated SQL Injection due to improper filter configuration. This allows an attacker to execute...

10CVSS8AI score0.01745EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•2 views

CVE-2025-9223: Improper Neutralization of Special Elements used in a Command

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature...

8.8CVSS7.9AI score0.04242EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/31 3:11 p.m.•15 views

CVE-2025-5347

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS6.2AI score0.00454EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 3:15 p.m.•19 views

CVE-2025-5347

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS0.00454EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/30 3:15 p.m.•13 views

CVE-2025-5347

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

5.4CVSS5.8AI score0.00454EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 3:15 p.m.•17 views

CVE-2025-5343

Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option...

6.3CVSS0.00454EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/30 3:15 p.m.•15 views

CVE-2025-5342

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

6.5CVSS5.8AI score0.01137EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/30 2:31 p.m.•14 views

EUVD-2025-37002

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS5.7AI score0.00454EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/30 2:31 p.m.•12 views

CVE-2025-5347 Stored XSS

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS5.8AI score0.00454EPSS
SaveExploits0References1
Rows per page
Query Builder