Vulnerabilities (CVE)

Filtered by vendor Zohocorp Subscribe
Total 484 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37921 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37920 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37919 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37918 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37762 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution.
CVE-2021-37761 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution.
CVE-2021-37741 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 6.5 MEDIUM 8.8 HIGH
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities.
CVE-2021-37539 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
CVE-2021-37424 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.
CVE-2021-37423 1 Zohocorp 1 Manageengine Adselfservice Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.
CVE-2021-37422 1 Zohocorp 1 Manageengine Adselfservice Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.
CVE-2021-37421 1 Zohocorp 1 Manageengine Adselfservice Plus 2024-11-21 7.5 HIGH 9.8 CRITICAL
Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass.
CVE-2021-37420 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.
CVE-2021-37419 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 5.0 MEDIUM 7.5 HIGH
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.
CVE-2021-37417 1 Zohocorp 1 Manageengine Adselfservice Plus 2024-11-21 5.0 MEDIUM 9.8 CRITICAL
Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.
CVE-2021-37416 1 Zohocorp 1 Manageengine Adselfservice Plus 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.
CVE-2021-37414 1 Zohocorp 1 Manageengine Desktop Central 2024-11-21 5.0 MEDIUM 7.5 HIGH
Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.
CVE-2021-36772 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.
CVE-2021-36771 1 Zohocorp 1 Manageengine Admanager Plus 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.
CVE-2021-35512 1 Zohocorp 1 Manageengine Applications Manager 2024-11-21 6.4 MEDIUM 6.5 MEDIUM
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.