Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-44077 | 7.5 | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in t | 2025-10-31 14:44:52 | 2021-11-29 04:15:06 |
| CVE-2021-44515 | 10.0 | Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterpri | 2025-10-31 14:43:19 | 2021-12-12 05:15:07 |
| CVE-2022-28810 | 7.1 | Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attacker | 2025-10-31 14:40:07 | 2022-04-18 13:15:08 |
| CVE-2022-35405 | 9.8 | Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.) | 2025-10-31 14:39:58 | 2022-07-19 15:15:08 |
| CVE-2022-47966 | 9.8 | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, | 2025-10-31 14:39:50 | 2023-01-18 18:15:10 |
| CVE-2025-5496 | 3.3 | ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component. | 2025-10-28 15:36:52 | 2025-10-21 10:15:34 |
| CVE-2025-11248 | 3.2 | ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token. | 2025-10-28 13:22:12 | 2025-10-27 13:15:42 |
| CVE-2017-17552 | 6.8 | /LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted. | 2025-10-24 15:47:02 | 2018-02-07 17:29:01 |
| CVE-2025-10020 | 8.5 | Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component. | 2025-10-24 12:58:03 | 2025-10-21 13:15:35 |
| CVE-2025-6239 | 6.5 | Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor. | 2025-10-24 12:52:49 | 2025-10-21 13:15:36 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: