792 matches found
Code injection
In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...
CVE-2020-11527
In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...
CVE-2020-11527
The CVE-2020-11527 vulnerability affects Zoho ManageEngine OpManager before version 12.4.181. Multiple connected sources corroborate that an unauthenticated remote attacker can trigger a specially crafted URI to read arbitrary files, indicating an information disclosure risk. The Red Hat advisory...
CVE-2020-11527: Undefined Security Weakness
In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files...
PT-2020-12664
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.4.181 Description The issue allows an unauthenticated remote attacker to read arbitrary files by sending a specially crafted URI. Recommendations For versions prior to 12.4.181, update to versio...
CVE-2020-10541
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108...
CVE-2020-10541
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108...
Remote code execution
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108...
CVE-2020-10541
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108...
CVE-2020-10541
Zoho ManageEngine OpManager prior to 12.4.179 is affected by a remote code execution vulnerability via a specially crafted Mail Server Settings v1 API request. The issue has a fixed patch in version 12.5.108. Exploitation details are not provided in the connected documents beyond the API request ...
ZOHO ManageEngine OpManager Code Execution Vulnerability
ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A security vulnerability exists in the Mail Server Settings v1 API in Zoho ManageEngine OpManager versions prior to 12.4.179. An attacker can exploit the vulnerability to execute code via a...
CVE-2020-10541: Undefined Security Weakness
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108...
PT-2020-12193
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.5.108 Description The issue allows remote code execution via a specially crafted "Mail Server Settings" v1 API request. Recommendations For versions prior to 12.5.108, update to version 12.5.108...
Zoho ManageEngine OpManager External Entity Injection (CVE-2018-18980)
An External Entity Injection information disclosure vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the RequestXML parameter when processing requests sent to BusinessViewFlashImpl. A remote, unauthenticated attacker could exploit this...
CVE-2014-7863
The FailOverHelperServlet aka FailServlet servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to 1 read arbitrary...
CVE-2014-7863
The FailOverHelperServlet aka FailServlet servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to 1 read arbitrary...
Zoho ManageEngine OpManager and Firewall Analyzer Elevation of Privilege Vulnerability
Zoho ManageEngine OpManager and Zoho ManageEngine Firewall Analyzer are both products from Zoho, Inc. Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software. Zoho ManageEngine Firewall Analyzer is a web-based firewall log analysis tool that collects,...
CVE-2019-17421
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload...
CVE-2019-17421
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload...
Design/Logic Flaw
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload...