PT-2018-15316

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows SQL injection in the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version after build...

PT-2018-15317

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows for XSS in the Notes column of the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version...

CVE-2018-20173

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...

Sql injection

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...

CVE-2018-20173: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...

Zoho ManageEngine OpManager 12.3 SQL Injection Vulnerability

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE...

PT-2018-15286

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123238 Description The issue allows SQL injection via the "getGraphData API" endpoint. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123238, update to a version that include...

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2019-24539)

ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the enterprise...

Stack overflow

Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service stack-based buffer overflow via the 'Domain Name' field when adding a new domain...

CVE-2018-19118

CVE-2018-19118 affects Zoho ManageEngine ADAudit prior to version 5.1 build 5120. The issue is a stack-based buffer overflow in the handling of the 'Domain Name' field when adding a new domain, which allows remote attackers to cause a denial of service. Connected sources consistently describe thi...

CVE-2018-19118: Out-of-bounds Write

Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service stack-based buffer overflow via the 'Domain Name' field when adding a new domain...

Zoho ManageEngine OpManager 12.3 Cross Site Scripting

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123237 has XSS via the domainController API. II. CVE REFERENCE ------------------------- CVE-2018-19921 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE ------------------------...

ZOHO ManageEngine OpManager domain controller cross-site scripting vulnerability

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. domain controller is one of the domain controller components. A cross-site scripting vulnerability exists in the domain controller in versions prior to ZOHO ManageEngine OpManager 12.3 Build...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

Design/Logic Flaw

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

CVE-2018-19921: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

PT-2018-15165

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123237 Description The issue concerns a cross-site scripting XSS flaw in the domain controller of the affected software. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123237...

Zoho ManageEngine OpManager oputilsServlet Authentication Bypass (CVE-2018-17283)

An authentication bypass vulnerability exists in ManageEngine OpManager. The vulnerability is due to lack of access control of /oputilsServlet?action=getAPIKey method...

Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)

An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...