792 matches found
Zoho ManageEngine OpManager Information Disclosure Vulnerability (CNVD-2020-28455)
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An information disclosure vulnerability exists in Zoho ManageEngine OpManager. The vulnerability can be exploited to read arbitrary files with the help of a specially crafted request...
CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...
CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...
Cross site request forgery (csrf)
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...
CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...
CVE-2020-12116
Zoho ManageEngine OpManager is affected by CVE-2020-12116. OpManager Stable build prior to 124196 and Released build prior to 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a specially crafted request, via a directory traversal vulnerability in the appl...
CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request. Recent assessments: Mad-robot at July 05, 2020 1:47pm UTC reported: Unauthenticated arbitrary file read on...
PT-2020-13045
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 124196 Stable build and prior to 125125 Released build Description The issue allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request. Recommendations F...
CVE-2020-12116: Improper Limitation of a Pathname to a Restricted Directory
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...
Zoho ManageEngine OpManager Information Disclosure Vulnerability (CNVD-2020-28457)
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An information disclosure vulnerability exists in Zoho ManageEngine OpManager. The vulnerability can be exploited to retrieve API keys via servlet calls...
CVE-2020-11946
Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call...
CVE-2020-11946
Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call...
Code injection
Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call...
CVE-2020-11946
Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call...
CVE-2020-11946
Zoho ManageEngine OpManager versions prior to 125120 are affected by an information-disclosure vulnerability: an unauthenticated user can retrieve an API key via a servlet call. The issue enables access to API keys without authentication, exposing credentials that could be used to interact with t...
CVE-2020-11946: Missing Authentication for Critical Function
Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call...
PT-2020-12941 · Zoho · Zoho Manageengine Opmanager
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 125120 Description: The issue allows an unauthenticated user to retrieve an API key via a servlet call. Recommendations: For versions prior to 125120, update to version 125120 or later to resolve...
ZOHO ManageEngine OpManager Information Disclosure Vulnerability
ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. An information disclosure vulnerability exists in ZOHO ManageEngine OpManager versions prior to 12.4.181. The vulnerability can be exploited by a remote attacker to read arbitrary files using...