6460 matches found
ZOHO ManageEngine ADAudit Plus 安全漏洞
ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus 8000 and prior versions, which can be exploited by an attacker to execute custom queries and access database...
CVE-2024-5490: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...
CVE-2024-36516: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36515, both of which have affected ADAudit Plus' dashboard...
CVE-2024-38869: Incorrect Authorization
Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25...
ZOHO ManageEngine ADAudit Plus 安全漏洞
ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. ZOHO ManageEngine ADAudit Plus prior to version 8000 suffers from a SQL injection vulnerability that can be exploited by an attacker to execute custom queries and access database...
ZOHO ManageEngine ADAudit Plus 安全漏洞
ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. ZOHO ManageEngine ADAudit Plus prior to version 8000 suffers from a SQL injection vulnerability that can be exploited by an attacker to execute custom queries and access database...
CVE-2024-5556: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module...
CVE-2024-5467: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...
CVE-2024-41150: Improper Neutralization of Input During Web Page Generation
An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800...
PT-2024-29295 · Zoho · Manageengine Supportcenter Plus +1
Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus versions through 14810 ManageEngine ServiceDesk Plus MSP versions through 14800 ManageEngine SupportCenter Plus versions through 14800 Description: A Stored Cross-site Scripting vulnerability in the request modul...
ZOHO ManageEngine OpManager RMM 安全漏洞
ZOHO ManageEngine OpManager RMM is a remote monitoring and management software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine OpManager RMM version 128329 and prior versions, which stems from a remote code execution contained in the deployment agent option...
PT-2024-36395
Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below Description The issue concerns an authenticated remote code execution vulnerability in the deploy agent option. This allows for potential...
ManageEngine ServiceDesk Plus MSP < 14.8 Build 14810
The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.8 Build 14810. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2024-41150 advisory. - An Stored Cross-site Scripting vulnerability in request module affects Zohocorp...
ZOHO ManageEngine ServiceDesk Plus和SupportCenter Plus 安全漏洞
ZOHO ManageEngine ServiceDesk Plus SDP and ZOHO ManageEngine SupportCenter Plus are both products of ZOHO, Inc.ZOHO ManageEngine ServiceDesk Plus is a suite of ITIL architecture-based ZOHO ManageEngine ServiceDesk Plus is an ITIL-based IT service management software. The software integrates...
The vulnerability of the Reports module of the monitoring, analysis, and reporting software ManageEngine Exchange Reporter Plus allows a hacker to execute arbitrary SQL queries against the database.
The vulnerability of the Reports module in the ManageEngine Exchange Reporter Plus software for monitoring, analysis, and report generation is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...
ManageEngine ADAudit Plus < Build 8110 Multiple Vulnerabilities
The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8110. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...
ManageEngine ADAudit Plus < Build 8003 Multiple Vulnerabilities
The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8003. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...
CVE-2024-5487
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...
