Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-5487 | 8.8 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option. | 2024-08-16 20:22:51 | 2024-08-12 13:38:37 |
| CVE-2024-36034 | 8.8 | Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option. | 2024-08-16 20:21:06 | 2024-08-12 13:38:21 |
| CVE-2024-5678 | 4.7 | Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature. | 2024-08-15 18:05:54 | 2024-08-01 07:15:03 |
| CVE-2019-15045 | 5.0 | AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration. NOTE: the vendor's position is that this is intended functionality | 2024-08-05 01:15:37 | 2019-08-21 19:15:13 |
| CVE-2020-9347 | 7.5 | Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV | 2024-08-04 11:15:43 | 2020-03-16 22:15:15 |
| CVE-2021-33256 | 9.3 | A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username parameter seems to be vulnerable and a reverse shell could be obtained if a pr | 2024-08-04 00:15:30 | 2021-08-09 14:15:31 |
| CVE-2022-47578 | 7.8 | An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is | 2024-08-03 15:15:49 | 2022-12-20 04:15:09 |
| CVE-2022-47577 | 7.8 | An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is | 2024-08-03 15:15:49 | 2022-12-20 04:15:09 |
| CVE-2023-35854 | 9.8 | Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. NOTE: th | 2024-08-02 17:15:48 | 2023-06-20 12:15:09 |
| CVE-2023-32783 | 7.5 | The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix. NOTE: the vendor states "We do not consider this as a security bug and i | 2024-08-02 16:15:28 | 2023-08-07 17:15:11 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: