https://vulnogram.org/ Most recent CVEs assigned by manageengine (manageengine). https://vulnogram.org/seaview/icons/manageengine.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-1723 https://vulnogram.org/CVE-2025-1723 Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug. High Mon, 03 Mar 2025 07:40:10 GMT https://vulnogram.org/CVE-2024-9097 https://vulnogram.org/CVE-2024-9097 ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat. Low Wed, 05 Feb 2025 12:40:15 GMT https://vulnogram.org/CVE-2024-41140 https://vulnogram.org/CVE-2024-41140 Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in the update user function. High Wed, 29 Jan 2025 11:14:50 GMT https://vulnogram.org/CVE-2024-52323 https://vulnogram.org/CVE-2024-52323 Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account. High Network Exploitable Wed, 27 Nov 2024 09:54:07 GMT https://vulnogram.org/CVE-2024-49574 https://vulnogram.org/CVE-2024-49574 Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module. High Mon, 18 Nov 2024 07:55:13 GMT https://vulnogram.org/CVE-2024-10839 https://vulnogram.org/CVE-2024-10839 Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option. High Fri, 08 Nov 2024 10:58:19 GMT https://vulnogram.org/CVE-2024-24409 https://vulnogram.org/CVE-2024-24409 Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option. High Fri, 08 Nov 2024 08:01:12 GMT https://vulnogram.org/CVE-2024-10203 https://vulnogram.org/CVE-2024-10203 Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines. High Thu, 07 Nov 2024 09:20:07 GMT https://vulnogram.org/CVE-2024-9459 https://vulnogram.org/CVE-2024-9459 Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module. High Tue, 05 Nov 2024 05:44:57 GMT https://vulnogram.org/CVE-2024-36485 https://vulnogram.org/CVE-2024-36485 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option. High Mon, 04 Nov 2024 11:13:02 GMT https://vulnogram.org/CVE-2024-48878 https://vulnogram.org/CVE-2024-48878 Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. High Mon, 04 Nov 2024 10:56:26 GMT https://vulnogram.org/CVE-2024-5608 https://vulnogram.org/CVE-2024-5608 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature. High Thu, 24 Oct 2024 11:42:44 GMT https://vulnogram.org/CVE-2024-9100 https://vulnogram.org/CVE-2024-9100 Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal. Medium Thu, 03 Oct 2024 14:17:02 GMT https://vulnogram.org/CVE-2024-38868 https://vulnogram.org/CVE-2024-38868 Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15 High Fri, 30 Aug 2024 17:44:38 GMT https://vulnogram.org/CVE-2024-6204 https://vulnogram.org/CVE-2024-6204 Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module. High Fri, 30 Aug 2024 17:10:07 GMT https://vulnogram.org/CVE-2024-5546 https://vulnogram.org/CVE-2024-5546 Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option. High Wed, 28 Aug 2024 08:44:09 GMT https://vulnogram.org/CVE-2024-41150 https://vulnogram.org/CVE-2024-41150 An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 1480… Medium Fri, 23 Aug 2024 14:08:17 GMT https://vulnogram.org/CVE-2024-38869 https://vulnogram.org/CVE-2024-38869 Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25. High Fri, 23 Aug 2024 14:07:46 GMT https://vulnogram.org/CVE-2024-5586 https://vulnogram.org/CVE-2024-5586 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option. High Fri, 23 Aug 2024 13:54:53 GMT https://vulnogram.org/CVE-2024-5556 https://vulnogram.org/CVE-2024-5556 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module. High Fri, 23 Aug 2024 13:52:28 GMT https://vulnogram.org/CVE-2024-5490 https://vulnogram.org/CVE-2024-5490 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option. High Fri, 23 Aug 2024 13:44:08 GMT https://vulnogram.org/CVE-2024-36514 https://vulnogram.org/CVE-2024-36514 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option. High Fri, 23 Aug 2024 13:37:56 GMT https://vulnogram.org/CVE-2024-36515 https://vulnogram.org/CVE-2024-36515 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashbo… High Fri, 23 Aug 2024 13:37:02 GMT https://vulnogram.org/CVE-2024-36516 https://vulnogram.org/CVE-2024-36516 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashbo… High Fri, 23 Aug 2024 13:36:05 GMT https://vulnogram.org/CVE-2024-36517 https://vulnogram.org/CVE-2024-36517 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module. High Fri, 23 Aug 2024 13:34:01 GMT https://vulnogram.org/CVE-2024-5467 https://vulnogram.org/CVE-2024-5467 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report. High Fri, 23 Aug 2024 13:28:28 GMT https://vulnogram.org/CVE-2024-5466 https://vulnogram.org/CVE-2024-5466 Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option. High Fri, 23 Aug 2024 13:23:22 GMT https://vulnogram.org/CVE-2024-36034 https://vulnogram.org/CVE-2024-36034 Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option. High Mon, 12 Aug 2024 07:23:17 GMT https://vulnogram.org/CVE-2024-36035 https://vulnogram.org/CVE-2024-36035 Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording. High Mon, 12 Aug 2024 07:19:54 GMT https://vulnogram.org/CVE-2024-36518 https://vulnogram.org/CVE-2024-36518 Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard. High Mon, 12 Aug 2024 07:13:49 GMT https://vulnogram.org/CVE-2024-5487 https://vulnogram.org/CVE-2024-5487 Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option. High Mon, 12 Aug 2024 07:04:12 GMT https://vulnogram.org/CVE-2024-5527 https://vulnogram.org/CVE-2024-5527 Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration. High Mon, 12 Aug 2024 05:31:09 GMT https://vulnogram.org/CVE-2024-5678 https://vulnogram.org/CVE-2024-5678 Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature. Medium Thu, 01 Aug 2024 06:54:25 GMT https://vulnogram.org/CVE-2024-6748 https://vulnogram.org/CVE-2024-6748 Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring. High Mon, 29 Jul 2024 16:20:16 GMT https://vulnogram.org/CVE-2024-38872 https://vulnogram.org/CVE-2024-38872 Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module. High Fri, 26 Jul 2024 17:30:23 GMT https://vulnogram.org/CVE-2024-38871 https://vulnogram.org/CVE-2024-38871 Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module. High Fri, 26 Jul 2024 17:29:42 GMT https://vulnogram.org/CVE-2024-38870 https://vulnogram.org/CVE-2024-38870 Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module. Low Wed, 17 Jul 2024 16:48:58 GMT https://vulnogram.org/CVE-2024-5471 https://vulnogram.org/CVE-2024-5471 Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys. High Network Exploitable Wed, 17 Jul 2024 10:56:53 GMT https://vulnogram.org/CVE-2024-27311 https://vulnogram.org/CVE-2024-27311 Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder. Medium Wed, 17 Jul 2024 10:52:45 GMT https://vulnogram.org/CVE-2024-36038 https://vulnogram.org/CVE-2024-36038 Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option. Medium Mon, 24 Jun 2024 11:45:11 GMT https://vulnogram.org/CVE-2024-27313 https://vulnogram.org/CVE-2024-27313 Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610. Medium Wed, 29 May 2024 11:01:21 GMT https://vulnogram.org/CVE-2024-36037 https://vulnogram.org/CVE-2024-36037 Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings. Medium Mon, 27 May 2024 17:59:52 GMT https://vulnogram.org/CVE-2024-36036 https://vulnogram.org/CVE-2024-36036 Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration. Medium Mon, 27 May 2024 17:58:16 GMT https://vulnogram.org/CVE-2024-27310 https://vulnogram.org/CVE-2024-27310 Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input. Medium Network Exploitable Mon, 27 May 2024 17:26:14 GMT https://vulnogram.org/CVE-2024-27314 https://vulnogram.org/CVE-2024-27314 Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by t… Low Mon, 27 May 2024 07:03:13 GMT https://vulnogram.org/CVE-2024-21791 https://vulnogram.org/CVE-2024-21791 Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability. Medium Wed, 22 May 2024 18:05:23 GMT https://vulnogram.org/CVE-2023-49335 https://vulnogram.org/CVE-2023-49335 Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details. High Mon, 20 May 2024 17:55:49 GMT https://vulnogram.org/CVE-2023-49334 https://vulnogram.org/CVE-2023-49334 Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report. High Mon, 20 May 2024 17:55:14 GMT https://vulnogram.org/CVE-2023-49333 https://vulnogram.org/CVE-2023-49333 Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature. High Mon, 20 May 2024 17:51:50 GMT https://vulnogram.org/CVE-2023-49332 https://vulnogram.org/CVE-2023-49332 Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares. High Mon, 20 May 2024 17:45:36 GMT