Code injection

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...

CVE-2018-20339

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...

Sql injection

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

CVE-2018-20339

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...

CVE-2018-20339

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...

Zoho ManageEngine OpManager 12.3 Alarms SQL Injection

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20338 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...

Zoho ManageEngine OpManager 12.3 Alarms Cross Site Scripting

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20339 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...

CVE-2018-20173

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...

Sql injection

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...

Zoho ManageEngine OpManager 12.3 SQL Injection Vulnerability

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE...

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2019-24539)

ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the enterprise...

Stack overflow

Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service stack-based buffer overflow via the 'Domain Name' field when adding a new domain...

CVE-2018-19118

CVE-2018-19118 affects Zoho ManageEngine ADAudit prior to version 5.1 build 5120. The issue is a stack-based buffer overflow in the handling of the 'Domain Name' field when adding a new domain, which allows remote attackers to cause a denial of service. Connected sources consistently describe thi...

Zoho ManageEngine OpManager 12.3 Cross Site Scripting

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123237 has XSS via the domainController API. II. CVE REFERENCE ------------------------- CVE-2018-19921 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE ------------------------...

ZOHO ManageEngine OpManager domain controller cross-site scripting vulnerability

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. domain controller is one of the domain controller components. A cross-site scripting vulnerability exists in the domain controller in versions prior to ZOHO ManageEngine OpManager 12.3 Build...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

Design/Logic Flaw

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

Zoho ManageEngine OpManager oputilsServlet Authentication Bypass (CVE-2018-17283)

An authentication bypass vulnerability exists in ManageEngine OpManager. The vulnerability is due to lack of access control of /oputilsServlet?action=getAPIKey method...

Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)

An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...