Product:

Manageengine_applications_manager

(Zohocorp)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 52
Date Id Summary Products Score Patch Annotated
2023-08-10 CVE-2023-38333 Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in. Manageengine_applications_manager 6.1
2023-04-11 CVE-2023-28340 Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack. Manageengine_applications_manager 6.5
2023-04-11 CVE-2023-28341 Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page. Manageengine_applications_manager 6.1
2023-04-26 CVE-2023-29442 Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS. Manageengine_applications_manager 6.1
2020-09-04 CVE-2020-14008 Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution. Manageengine_applications_manager 7.2
2020-09-25 CVE-2020-15394 The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution. Manageengine_applications_manager 9.8
2020-09-25 CVE-2020-15521 Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) . Manageengine_applications_manager 6.1
2020-10-01 CVE-2020-15533 In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack. Manageengine_applications_manager 9.8
2020-10-06 CVE-2020-16267 Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module. Manageengine_applications_manager 8.8
2020-10-06 CVE-2020-15927 Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module. Manageengine_applications_manager 8.8