2779 matches found
CVE-2018-18980: Improper Restriction of XML External Entity Reference
An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...
Sql injection
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
PT-2018-14738
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123222 Description The issue is related to SQL Injection via Mail Server settings. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123222, update to a version that includes th...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability (CNVD-2018-22338)
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...
Unrestricted file upload
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...
CVE-2018-18475
Zoho ManageEngine OpManager is affected by CVE-2018-18475: prior to 12.3 build 123214, the product allows unrestricted arbitrary file upload due to insufficient validation of uploaded images. The vulnerability stems from an inadequate check during file upload, enabling an attacker to upload arbit...
Zoho ManageEngine OpManager Arbitrary File Upload Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be successfully exploited to allow remote code execution on the target host...
PT-2018-14478
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 build 123214 Description The issue allows for Unrestricted Arbitrary File Upload. Recommendations For versions prior to 12.3 build 123214, update to version 12.3 build 123214 or later to resol...
CVE-2018-18475: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
Cross site scripting
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
CVE-2018-18262
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
CVE-2018-18262: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...
PT-2018-14387
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123214 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123214, update to a version that...