Vulnerabilities (CVE)

Filtered by vendor Zohocorp Subscribe
Total 487 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-40178 1 Zohocorp 1 Manageengine Log360 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.
CVE-2021-40177 1 Zohocorp 1 Manageengine Log360 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.
CVE-2021-40176 1 Zohocorp 1 Manageengine Log360 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Zoho ManageEngine Log360 before Build 5225 allows stored XSS.
CVE-2021-40175 1 Zohocorp 1 Manageengine Log360 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.
CVE-2021-40174 1 Zohocorp 1 Manageengine Log360 2024-11-21 6.8 MEDIUM 8.8 HIGH
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.
CVE-2021-40173 1 Zohocorp 1 Manageengine Cloud Security Plus 2024-11-21 6.8 MEDIUM 8.8 HIGH
Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.
CVE-2021-40172 1 Zohocorp 1 Manageengine Log360 2024-11-21 6.8 MEDIUM 8.8 HIGH
Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.
CVE-2021-3287 1 Zohocorp 1 Manageengine Opmanager 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.
CVE-2021-38298 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE.
CVE-2021-37931 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37930 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37929 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37928 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37927 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.
CVE-2021-37926 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37925 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability.
CVE-2021-37924 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37923 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37922 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to another.
CVE-2021-37921 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.