Filtered by vendor Zohocorp Subscriptions
Total 615 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-92905 1 Zohocorp 2 Manageengine Eventlog Analyzer, Manageengine Log360 2026-09-24 5.3 Medium
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets.
CVE-2026-86708 1 Zohocorp 1 Manageengine Applications Manager 2026-09-23 10 Critical
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.
CVE-2026-86679 1 Zohocorp 1 Manageengine Applications Manager 2026-09-23 7.1 High
ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope.
CVE-2026-86677 1 Zohocorp 1 Manageengine Applications Manager 2026-09-23 8.8 High
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution.
CVE-2026-76979 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 7.7 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.
CVE-2026-76978 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 8.8 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature.
CVE-2026-75825 1 Zohocorp 1 Manageengine Opmanager 2026-09-23 8.8 High
ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability.
CVE-2026-19599 1 Zohocorp 1 Manageengine Opmanager 2026-09-23 9.9 Critical
ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module.
CVE-2026-86683 1 Zohocorp 1 Manageengine Applications Manager 2026-09-23 8.1 High
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings.
CVE-2026-86681 1 Zohocorp 1 Manageengine Applications Manager 2026-09-23 7.6 High
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.
CVE-2026-86678 1 Zohocorp 1 Manageengine Applications Manager 2026-09-23 8.8 High
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions.
CVE-2026-84791 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 7.1 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.
CVE-2026-15358 1 Zohocorp 2 Manageengine Network Configuration Manager, Manageengine Opmanager 2026-09-23 7.5 High
ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability.
CVE-2026-84789 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 7.1 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications for firewalls outside their assigned scope.
CVE-2026-84787 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 8.1 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.
CVE-2026-76980 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 7.4 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.
CVE-2026-14913 1 Zohocorp 2 Manageengine Firewall Analyzer, Manageengine Opmanager 2026-09-23 8.8 High
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.
CVE-2026-74849 1 Zohocorp 1 Manageengine Adselfservice Plus 2026-09-22 9.8 Critical
Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.
CVE-2026-75791 1 Zohocorp 1 Manageengine Adselfservice Plus 2026-09-22 8.6 High
Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.
CVE-2026-18911 1 Zohocorp 1 Manageengine Datasecurity Plus 2026-09-19 7.5 High
ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.