Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-11946 | 5.0 | Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. | 2022-10-05 18:37:00 | 2020-04-20 21:15:00 |
| CVE-2022-29457 | 6.5 | Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps. | 2022-09-30 13:08:00 | 2022-04-18 20:15:00 |
| CVE-2022-38772 | 8.8 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution i | 2022-09-02 19:47:00 | 2022-08-29 21:15:00 |
| CVE-2020-21641 | 7.5 | Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file. | 2022-08-16 17:29:00 | 2022-08-15 20:15:00 |
| CVE-2020-21642 | 9.8 | Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code. | 2022-08-16 17:28:00 | 2022-08-15 20:15:00 |
| CVE-2022-37024 | 8.8 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes tha | 2022-08-16 16:01:00 | 2022-08-10 20:16:00 |
| CVE-2022-36412 | 9.8 | In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.) | 2022-08-02 20:05:00 | 2022-07-26 14:15:00 |
| CVE-2022-35403 | 5.0 | Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. (This also affects Asset Explore | 2022-07-19 18:02:00 | 2022-07-12 22:15:00 |
| CVE-2022-34829 | 5.0 | Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload to the Mobile App Deployment API. | 2022-07-13 13:34:00 | 2022-07-04 20:15:00 |
| CVE-2022-32551 | 5.0 | Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml). | 2022-07-12 18:44:00 | 2022-07-02 00:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: