PT-2018-13963

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 123205 Description The issue allows for SQL Injection in the Global Search feature. Recommendations For versions prior to 12.3 123205, update to version 12.3 123205 or later to resolve the iss...

CVE-2018-17243: Improper Neutralization of Special Elements used in an SQL Command

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

ManageEngine Desktop Central 10.0.271 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ManageEngine Desktop Central 10 - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/desktop-central/ Software : ZOHO Corp...

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2019-24540)

Zoho ManageEngine OpManager is an end-to-end integrated network management software that enables all-round, visual, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the enterprise network...

ManageEngine Desktop Central 10.0.271 Cross Site Scripting

Exploit Title: ManageEngine Desktop Central 10 - Cross-Site Scripting Date: 2018-09-11 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/desktop-central/ Software : ZOHO Corp ManageEngine Desktop Central 10 Product...

ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting

Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Date: 2018-09-12 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software : ZOHO Corp ManageEngine SupportCente...

ZOHO ManageEngine Desktop Central elevation of privilege vulnerability (CNVD-2018-18893)

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An elevation of...

ZOHO ManageEngine Desktop Central Elevation of Privilege Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An elevation of...

CVE-2018-13412

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13412

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

Information disclosure

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

Information disclosure

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

CVE-2018-13411 affects Zoho ManageEngine Desktop Central prior to 10.0.282. A clickable company logo in a window running as SYSTEM allows privilege escalation. In cloud, the issue is fixed in 10.0.470 agent version; on-prem mitigation is upgrade/build 100282 (as referenced by the Nessus plugin). ...

CVE-2018-13412

The CVE-2018-13412 issue affects Zoho ManageEngine Desktop Central’s Self Service Portal prior to 10.0.282. A clickable company logo in a window running with SYSTEM privileges can be abused to escalate privileges. Cloud deployments are fixed in 10.0.470 agent version. Other references corroborate...

CVE-2018-13412

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

PT-2018-11807

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.282 Zoho ManageEngine Desktop Central agent versions prior to 10.0.470 Description A security issue was found in Zoho ManageEngine Desktop Central, where a clickable company logo in a...