Vulnerabilities > Zohocorp

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-15046 Improper Authentication vulnerability in Zohocorp Manageengine Servicedesk Plus
Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service (FOS) replication, aka SD-79989.
network
low complexity
zohocorp CWE-287
7.5
7.5
2019-08-08 CVE-2019-14693 XXE vulnerability in Zohocorp Manageengine Assetexplorer 6.2.0
Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data.
network
low complexity
zohocorp CWE-611
8.1
8.1
2019-08-08 CVE-2019-12994 Server-Side Request Forgery (SSRF) vulnerability in Zohocorp Manageengine Assetexplorer 6.2.0
Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL.
network
low complexity
zohocorp CWE-918
critical
 9.1
9.1
2019-08-08 CVE-2019-12959 Server-Side Request Forgery (SSRF) vulnerability in Zohocorp Manageengine Assetexplorer
Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter.
network
low complexity
zohocorp CWE-918
8.8
8.8
2019-07-17 CVE-2019-12876 Incorrect Permission Assignment for Critical Resource vulnerability in Zohocorp products
Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System.
local
low complexity
zohocorp CWE-732
7.3
7.3
2019-07-11 CVE-2019-12597 Cross-site Scripting vulnerability in Zohocorp Manageengine Assetexplorer 6.5
An issue was discovered in Zoho ManageEngine AssetExplorer.
network
low complexity
zohocorp CWE-79
6.1
6.1
2019-07-11 CVE-2019-12596 Cross-site Scripting vulnerability in Zohocorp Manageengine Assetexplorer 6.5
An issue was discovered in Zoho ManageEngine AssetExplorer.
network
low complexity
zohocorp CWE-79
6.1
6.1
2019-07-11 CVE-2019-12595 Cross-site Scripting vulnerability in Zohocorp Manageengine Assetexplorer 6.5
An issue was discovered in Zoho ManageEngine AssetExplorer.
network
low complexity
zohocorp CWE-79
6.1
6.1
2019-07-11 CVE-2019-12540 Cross-site Scripting vulnerability in Zohocorp Manageengine Servicedesk Plus 10.5
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5.
network
low complexity
zohocorp CWE-79
6.1
6.1
2019-07-11 CVE-2019-12539 Cross-site Scripting vulnerability in Zohocorp Manageengine Servicedesk Plus 10.5
An issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus.
network
low complexity
zohocorp CWE-79
6.1
6.1