CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

CVE-2023-28340

Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...

CVE-2023-28341

Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...

Cross site scripting

Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...

PT-2023-21663 · Zoho · Zoho Manageengine Applications Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions through 16320 Description: The issue allows an admin user to conduct an XXE attack. Recommendations: For versions through 16320, update to a version that contains a fix for this issue to prevent...

Zoho ManageEngine Applications Manager 代码问题漏洞

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product features application performance management, fault management, report generation, and SLA management. A security vulnerability exists in Zoho...

CVE-2020-24743

An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...

Server side request forgery (ssrf)

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...

CVE-2021-35512

CVE-2021-35512 describes a Server-Side Request Forgery (SSRF) in Zoho ManageEngine Applications Manager build 15200. The connected documents confirm the component is affected, but do not provide further technical details, exploit specifics, or remediation. The exact root cause, impact scope, and ...

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

CVE-2020-35765

CVE-2020-35765 affects Zoho ManageEngine Applications Manager up to version 14930, where doFilter in com.adventnet.appmanager.filter.UriCollector enables an authenticated SQL injection via the resourceid parameter to showresource.do. The issue is caused by improper handling in UriCollector used d...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2021-06863)

ZOHO ManageEngine Applications Manager is a suite of IT operations management solutions from ZOHO USA. A security vulnerability exists in ZOHO ManageEngine Applications Manager Alarmview, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, obtain...

CVE-2020-27733

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request...

PT-2021-11414 · Zoho · Zoho Manageengine Applications Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions prior to 14 build 14880 Description: The issue allows an authenticated SQL Injection via a crafted Alarmview request. This can potentially be exploited by sending a malicious request to the...

ManageEngine Applications Manager REST API SQLi

The remote host is running a version of ManageEngine Applications Manager that is affected by a SQL injection vulnerability due to improper validation of user-supplied input to the 'APIServlet' servlet. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP message to...

Zoho ManageEngine Applications Manager Arbitrary File Upload (CVE-2020-14008)

An arbitrary file upload vulnerability exists in Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user supplied data in UploadAction. Successful exploitation could result in uploading potentially dangerous file which may lead to arbitrary code execution...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-60827)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-10816

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...