İçeriğe atla
Noroxi

Zohocorp kayıtları

zohocorp üreticisine ait 552 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
9 · %1,6
Silahlaştırılmış
32 · %5,8
Pre-auth RCE
65
Düzeltme kaydı olan
%14,3
Yayından KEV’e ortanca
65 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

552 kayıt
  • CVE-2020-10189
    99Hemen

    Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine desktop central6 Mar 2020

  • CVE-2022-35405
    99Hemen

    Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine access manager plus19 Tem 2022

  • CVE-2021-44515
    99Hemen

    Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in th

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine desktop central12 Ara 2021

  • CVE-2021-37415
    99Hemen

    Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authenticatio

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine servicedesk plus1 Eyl 2021

  • CVE-2022-47966
    99Hemen

    Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine access manager plus18 Oca 2023

  • CVE-2021-40539
    99Hemen

    Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execu

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    zohocorp · manageengine adselfservice plus7 Eyl 2021

  • CVE-2021-44077
    97Hemen

    Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to un

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    zohocorp · manageengine servicedesk plus29 Kas 2021

  • CVE-2022-28810
    78Bu hafta

    Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS command

    OrtaCVSS 6,8KEVSilahlaştırılmışEPSS %70

    zohocorp · manageengine adselfservice plus18 Nis 2022

  • CVE-2019-8394
    75Bu hafta

    Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customizat

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %63

    zohocorp · manageengine servicedesk plus17 Şub 2019

  • CVE-2022-40300
    69Bu hafta

    Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 bef

    KritikCVSS 9,8İstismar yokEPSS %99

    zohocorp · manageengine access manager plus16 Eyl 2022

  • CVE-2022-28219
    68Bu hafta

    Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.

    KritikCVSS 9,8SilahlaştırılmışEPSS %97

    zohocorp · manageengine adaudit plus5 Nis 2022

  • CVE-2021-37539
    67Bu hafta

    Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %92

    zohocorp · manageengine admanager plus27 Eyl 2021

  • CVE-2022-29535
    67Bu hafta

    Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.

    KritikCVSS 9,8İstismar yokEPSS %91

    zohocorp · manageengine opmanager5 May 2022

  • CVE-2016-6600
    66Bu hafta

    Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to uploa

    KritikCVSS 9,8SilahlaştırılmışEPSS %90

    zohocorp · webnms framework23 Oca 2017

  • CVE-2016-6603
    65Bu hafta

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    zohocorp · webnms framework23 Oca 2017

  • CVE-2022-29081
    64Bu hafta

    Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-contro

    KritikCVSS 9,8Kavram kanıtıEPSS %83

    zohocorp · manageengine access manager plus28 Nis 2022

  • CVE-2019-17602
    63Bu hafta

    An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089.

    KritikCVSS 9,8İstismar yokEPSS %81

    zohocorp · manageengine opmanager15 Eki 2019

  • CVE-2014-7862
    63Bu hafta

    The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create ad

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    zohocorp · desktop central4 Oca 2018

  • CVE-2021-41288
    63Bu hafta

    Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.

    KritikCVSS 9,8İstismar yokEPSS %79

    zohocorp · manageengine opmanager30 Eyl 2021

  • CVE-2018-7890
    63Bu hafta

    A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640).

    KritikCVSS 9,8SilahlaştırılmışEPSS %78

    zohocorp · manageengine applications manager8 Mar 2018

  • CVE-2020-28653
    62Bu hafta

    Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    zohocorp · manageengine opmanager3 Şub 2021

  • CVE-2020-11532
    62Bu hafta

    Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server.

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    zohocorp · manageengine adaudit plus8 May 2020

  • CVE-2018-17243
    62Bu hafta

    Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %75

    zohocorp · manageengine opmanager20 Eyl 2018

  • CVE-2022-43671
    61Bu hafta

    Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %74

    zohocorp · manageengine access manager plus12 Kas 2022

  • CVE-2013-7390
    61Bu hafta

    Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remot

    KritikCVSS 9,8SilahlaştırılmışEPSS %74

    zohocorp · manageengine desktop central27 Oca 2020