CVE-2012-5956

Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...

CVE-2019-14693

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

The vulnerability of the generateSQLReport() function in software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus, as well as the ManageEngine AssetExplorer software for managing IT assets, allows attackers to exploit their privileges.

The vulnerability of the generateSQLReport function in software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus, as well as the ManageEngine AssetExplorer software for IT asset management, is related to deficiencie...

ManageEngine AssetExplorer < 6.9 Build 6987

The version of ManageEngine AssetExplorer installed on the remote host is prior to 6.9 Build 6987. It is, therefore, affected by a vulnerability as referenced in the asset-explorerCVE-2023-23078 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the...

ManageEngine AssetExplorer < 6.9 Build 6977

The version of ManageEngine AssetExplorer installed on the remote host is prior to 6.9 Build 6977. It is, therefore, affected by a vulnerability as referenced in the asset-explorercve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...

ManageEngine AssetExplorer < 6.9 Build 6989 XXE

An XML external entity XXE vulnerability exists in ManageEngine AssetExplorer 6.9 Build 6980 through Build 6988. A threat actor with the SDAdmin role can configure a malicious server to return a response with a malformed XML using the Reports integration API, causing an XML External Entity XXE...

CVE-2023-29443

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

Design/Logic Flaw

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

CVE-2023-29443

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

PT-2023-22266 · Zoho · Supportcenter Plus +3

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14105 ServiceDesk Plus MSP versions prior to 14200 SupportCenter Plus versions prior to 14200 AssetExplorer versions prior to 6989 Description: The issue allows attackers with SDAdmin...

ManageEngine AssetExplorer < 6.9 Build 6988 Multiple Vulnerabilities

The version of ManageEngine AssetExplorer prior to 6.9 Build 6988 is running on the remote web server. It is, therefore, affected by multiple vulnerabilities, including the following: - A privilege escalation vulnerability in query reports. This vulnerability allows an attacker to gain access to...

ZOHO ManageEngine AssetExplorer 跨站脚本漏洞

ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO USA. The software provides asset tracking, scanning of IT assets and asset ownership tracking. A security vulnerability exists in ZOHO ManageEngine AssetExplorer version 6.9 that stems from the discovery of a...

ManageEngine AssetExplorer 6.9 Build 6980 XXE

An XML external entity XXE vulnerability exists in ManageEngine AssetExplorer 6.9 Build 6980 due to a flaw in the Analytics Plus integration. Threat actors with admin role access can retrieve local files from the server running the affected products. Note that Nessus has not tested for this issue...

ManageEngine AssetExplorer < 6.9 Build 6981 Privilege Escalation

A privilege escalation vulnerability exists in ManageEngine AssetExplorer prior to 6.9 Build 6981. This vulnerability allows an adversary to access restricted data in the Postgres database setup by using a specific PostgreSQL function in the query, which enables bypassing the validation mechanism...

The vulnerability of the wswprintf function in the AEAgent.cpp file of the ManageEngine AssetExplorer software, which allows a attacker to trigger a buffer overflow.

The vulnerability of the wswprintf function in the AEAgent.cpp file of the ManageEngine AssetExplorer software for managing IT assets is related to errors during certificate verification. Exploiting this vulnerability could allow a malicious actor to trigger a heap overflow...

The vulnerability of the ManageEngine AssetExplorer software for managing IT assets lies in the lack of memory release after processing HTTP requests. This allows a malicious actor to trigger a memory leak.

The vulnerability of the ManageEngine AssetExplorer software for managing IT assets is related to the lack of memory release after processing HTTP requests. Exploiting this vulnerability can allow a remote attacker to trigger a memory leak...

The vulnerability of the web application agent for managing IT assets, ManageEngine AssetExplorer, allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the ManageEngine AssetExplorer, a web application for managing IT assets, is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to execute arbitrary code or trigger a service failure using specially crafted NEWSCAN...

ZOHO ManageEngine AssetExplorer 信任管理问题漏洞

ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO USA. The software provides asset tracking, scanning of IT assets, and asset ownership tracking. ZOHO ManageEngine AssetExplorer suffers from a Trust Management Issue vulnerability that can be exploited by an attacke...

ZOHO ManageEngine AssetExplorer 信任管理问题漏洞

ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO, a US-based company. ZOHO ManageEngine AssetExplorer Agent 1.0.34 is vulnerable to a trust management issue that could be exploited by an attacker to remotely execute code on the agent machine as NT AUTHORITY SYSTEM...

ZOHO ManageEngine AssetExplorer 安全漏洞

ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO USA. The software provides asset tracking, scanning of IT assets and asset ownership tracking. A security vulnerability exists in ZOHO ManageEngine AssetExplorer Agent version 1.0.34, which originates when the progr...