Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zohocorp'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-35682 6.5 Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login). 2021-03-18 20:28:00
CVE-2020-35594 4.3 Zoho ManageEngine ADManager Plus before 7066 allows XSS. 2021-03-11 21:58:00
CVE-2020-35765 6.5 doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do. 2021-02-17 21:05:00
CVE-2019-12539 4.3 An issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is XSS via the SearchN.do search field, a different vulnerability than CVE-2019-12189. 2021-01-13 14:43:00
CVE-2020-27995 7.5 SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter. 2020-11-03 15:46:00
CVE-2020-10816 5.0 Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet. 2020-10-15 19:21:00
CVE-2020-15927 6.5 Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module. 2020-10-14 03:00:00
CVE-2020-16267 6.5 Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module. 2020-10-14 02:56:00
CVE-2020-15533 7.5 In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack. 2020-10-13 13:48:00
CVE-2017-14123 9.0 Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the serv 2020-10-01 17:51:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/54
Zapisa po stranici: