CVE-2014-6034

CVE-2014-6034 affects ManageEngine OpManager (versions 8.8–11.3) and related products (Social IT Plus 11.0, IT360 10.4 and earlier). A directory traversal in the FileCollector servlet, triggered by a ".." in the regionID parameter, allows remote attackers or remote authenticated users to write to...

CVE-2014-6036

CVE-2014-6036 is a directory-traversal vulnerability in the multipartRequest servlet used by ManageEngine OpManager and related products (OpManager <= 11.3, Social IT Plus <= 11.0, IT360

CVE-2014-7866

CVE-2014-7866 is a set of remote directory traversal/file-upload vulnerabilities affecting ZOHO ManageEngine OpManager (build 88xx–11.4), IT360 (10.3–10.4), and Social IT Plus (11.0). Exploitation occurs via unauthorized file writes through MigrateLEEData (fileName=..../warfile.war) or MigrateCen...

CVE-2014-7868

CVE-2014-7868 affects ManageEngine OpManager (11.3/11.4), IT360 (10.3/10.4) and Social IT Plus (11.0). The root cause is insufficient input validation of the OPM_BVNAME parameter to the APMBVHandler servlet, enabling remote attackers (authenticated or unauthenticated depending on context) to inje...

CVE-2014-7867

The CVE-2014-7867 entry describes a SQL injection in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet used by ManageEngine OpManager (versions 11.3/11.4), IT360 (10.3/10.4), and Social IT Plus (11.0). The vulnerability stems from insufficient validation of the probeName par...