6470 matches found
CVE-2020-24743
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
Design/Logic Flaw
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
CVE-2020-24743
Zoho ManageEngine Applications Manager (versions up to 14550) contains an elevation-of-privilege vulnerability in the /showReports.do endpoint, exploitable via the resourceid parameter. The issue, reported across multiple feeds (NVD, Red Hat, CNVD, CNVD-derived entries), lacks publicly documented...
CVE-2020-24743
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus
Exploitation code for CVE-2021-40539...
ZOHO ManageEngine Applications Manager 授权问题漏洞
Zoho ManageEngine Applications Manager is an application performance monitoring and management solution for various business monitoring and management needs of enterprises. An elevation of privilege vulnerability exists in /showReports.do in Zoho ManageEngine Applications Manager 14550 and earlie...
PT-2021-11071
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions up to 14550 Description: An issue was found in the "/showReports.do" endpoint of Zoho ManageEngine Applications Manager, allowing attackers to gain escalated privileges via the resourceid...
CVE-2020-24743: Undefined Security Weakness
An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter...
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
Zoho ManageEngine ServiceDesk Plus SDP contains an unspecified vulnerability that allows remote users to upload files via login page customization...
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution...
Zoho ManageEngine Desktop Central File Upload Vulnerability
Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution...
CVE-2021-20136
ManageEngine Log360 Builds 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log3...
Improper access control
ManageEngine Log360 Builds 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log3...
CVE-2021-20136
CVE-2021-20136 affects ManageEngine Log360 builds before 5235. The flaw is an improper access control that lets an unauthenticated attacker send crafted messages to overwrite the backend database configuration and force Log360 to restart. This can enable remote code execution by replacing startup...
CVE-2021-20136
ManageEngine Log360 Builds 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log3...
CVE-2021-20136: Missing Authentication for Critical Function
ManageEngine Log360 Builds 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log3...
ZOHO ManageEngine Log360 访问控制错误漏洞
ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.ZOHO ManageEngi...
PT-2021-13793
Name of the Vulnerable Software and Affected Versions: ManageEngine Log360 versions prior to 5235 Description: The issue is related to improper access control, allowing an unauthenticated remote attacker to send a specially crafted message to change the backend database to an attacker-controlled...
Zoho ManageEngine Applications Manager Server-Side Request Forgery Vulnerability
Zoho ManageEngine Applications Manager is an application performance monitoring and management solution for various business monitoring and management needs of enterprises. A server-side request forgery vulnerability exists in Zoho ManageEngine Applications Manager build 15200. No details of the...