CVE-2023-6105

< 11.2.2328.01

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

5.5MEDIUM

CVE-2022-47966

< 10.1.2228.11

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of

9.8CRITICAL

CVE-2022-26777

< 10.1.2137.15

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.

5.3MEDIUM

CVE-2022-26653

< 10.1.2137.15

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID

5.3MEDIUM

CVE-2021-42955

< 10.1.2132

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vul

7.3HIGH

CVE-2021-42954

< 10.1.2121.1

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installa

7.8HIGH

CVE-2021-41829

< 10.1.2121.1

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption

7.5HIGH

CVE-2021-41828

< 10.1.2121.1

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml.

7.5HIGH

CVE-2021-41827

< 10.1.2121.1

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the

7.5HIGH

CVE-2019-16268

all versions

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration u

4.8MEDIUM

CVE-2020-15589

< 10.1.2119.1

A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client si

8.1HIGH

CVE-2019-11361

all versions

Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and e

8.8HIGH

CVE-2019-20474

all versions

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffer

4.3MEDIUM

CVE-2020-8422

< 10.0.450

An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A

4.3MEDIUM