3556 matches found
Zoho ManageEngine OpManagerDBUtil SQL Injection (CVE-2018-9087)
An SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation. Successful exploitation could lead to arbitrary code execution in the security context of database service...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-18949)
An SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the mailservername. Successful exploitation could lead to arbitrary code execution in the security context of database service...
Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 XSS
!-- Exploit Title: Cross Site Scripting in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 Administration zone Date: 31-01-2019 Exploit Author: Rafael Pedrero Vendor Homepage: https://www.manageengine.com/products/netflow/?doc Software Link:...
ManageEngine OpManager 12.3 Privilege Escalation Vulnerability
ManageEngine OpManager version 12.3 suffers from a weak permissions issue in which an attacker can replace the service binary with a binary of his choice. This service runs as Localsystem thus allowing for a privilege escalation vector. ManageEngine OpManager Privilege Escalation Vendor: Zoho...
ManageEngine OpManager 12.3 Privilege Escalation
ManageEngine OpManager Privilege Escalation Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.3 Summary: OpManager offers comprehensive network monitoring capabilities that help you monitor network performance, detect network faults in real tim...
ManageEngine OpManager Privilege Escalation
Summary OpManager offers comprehensive network monitoring capabilities that help you monitor network performance, detect network faults in real time, troubleshoot errors, and prevent downtime. Being a powerful network monitor, it supports multi-vendor IT environments and can scale to fit your...
Zoho ManageEngine ADSelfService Plus Server-Side Request Forgery Vulnerability
ZOHO ManageEngine ADSelfService Plus is a Web-based end-user password management software from ZOHO. A server-side request forgery vulnerability exists in ZOHO ManageEngine ADSelfService Plus versions prior to 5.x build 5703, which can be exploited by an attacker to perform a server-side request...
CVE-2019-3905
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...
CVE-2018-20664
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license...
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...
Code injection
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license...
CVE-2019-3905
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...
CVE-2018-20664
CVE-2018-20664 affects Zoho ManageEngine ADSelfService Plus 5.x prior to build 5701. The vulnerability is an XML External Entity (XXE) injection via an uploaded product license, enabling an attacker to exploit XXE conditions. Impact indicators from the records show high severity (CVSS3.0: 9.8, CR...
CVE-2018-20664
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license...
CVE-2019-3905
CVE-2019-3905 affects Zoho ManageEngine ADSelfService Plus 5.x prior to build 5703. The vulnerability is an SSRF issue in the product, enabling an attacker to trigger server-side requests via crafted input. Public references in the connected documents confirm the issue was fixed by Build 5703 (re...
PT-2019-16760 · Zoho Manageengine · Adselfservice Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions 5.x before build 5703 Description: The issue is related to a Server-Side Request Forgery SSRF in Zoho ManageEngine ADSelfService Plus. Recommendations: For versions 5.x before build 5703, update t...
CVE-2018-20484
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...
CVE-2018-20484
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...