Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zohocorp'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2018-12997 5.0 Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before b 2023-12-07 20:06:40
CVE-2022-43473 5.4 A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerabilit 2023-11-07 03:53:00
CVE-2021-41081 7.5 Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a configuration search. 2023-11-07 03:38:00
CVE-2021-41080 7.5 Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a hardware details search. 2023-11-07 03:38:00
CVE-2020-24786 10.0 An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build nu 2023-11-07 03:20:00
CVE-2018-7248 5.0 An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3 Build 9317. Unauthenticated users are able to validate domain user accounts by sending a request containing the username to an API endpoint. The endpoint will return the user's logon d 2023-11-07 03:00:00
CVE-2022-35404 8.2 ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine. 2023-08-08 14:22:00
CVE-2022-23050 6.5 ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the 'working' folder through the 'Upload Files / Binaries' functionality. 2023-08-08 14:22:00
CVE-2022-26777 5.0 Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details. 2023-08-08 14:22:00
CVE-2022-26653 5.0 Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator). 2023-08-08 14:22:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/54
Zapisa po stranici: