CVE-2023-6105

< 7.0

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

5.5MEDIUM

CVE-2023-35785

< 6.9

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset

8.1HIGH

CVE-2023-29443

all versions

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExpl

4.9MEDIUM

CVE-2023-26601

< 6.9

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Cent

7.5HIGH

CVE-2023-26600

< 6.9

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Expl

6.5MEDIUM

CVE-2023-23075

all versions

Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation

6.1MEDIUM

CVE-2022-47966

< 6.9

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of

9.8CRITICAL

CVE-2022-40772

< 6.9

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sens

6.5MEDIUM

CVE-2022-40771

< 6.9

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Informat

4.9MEDIUM

CVE-2022-35403

< 6.9

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affect

7.5HIGH

CVE-2021-20110

all versions

Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically conf

9.8CRITICAL

CVE-2021-20109

all versions

Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP ad

7.5HIGH

CVE-2021-20108

all versions

Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTT

7.5HIGH

CVE-2020-8838

all versions

An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the s

6.4MEDIUM

CVE-2019-19034

all versions

Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynam

7.2HIGH

CVE-2019-14693

all versions

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML d

8.5HIGH

CVE-2019-12994

all versions

Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a param

9.1CRITICAL

CVE-2019-12959

< 6.2.0

Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet vi

8.8HIGH

CVE-2019-12597

all versions

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName.

6.1MEDIUM

CVE-2019-12596

all versions

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swCo

6.1MEDIUM

CVE-2019-12595

all versions

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.

6.1MEDIUM

CVE-2019-12537

all versions

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field.

6.1MEDIUM

CVE-2018-17596

all versions

In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or

6.1MEDIUM

CVE-2014-5302

all versions

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter

8.8HIGH

CVE-2014-5301

all versions

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT

8.8HIGH

CVE-2015-5061

all versions

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authen

CVE-2015-2169

all versions

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to injec

CVE-2012-5956

<= 5.6

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attack