Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

zohocorp / manageengine_analytics_plus CVEs

Beta · best-effort

7 CVEs tagged to zohocorp / manageengine_analytics_plus — 2 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to zohocorp vendor archive

CVE-2024-52323

Published Nov 27, 2024

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort

CVE-2023-6105

Published Nov 15, 2023

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host…

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-47966

Published Jan 18, 2023

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Jav…

CVSS 9.8 · Critical
evidence mentions
40
Buzz score
80.7
KEV listedPublic PoC observed
Vendor/product tagsBeta · best-effort

CVE-2020-21642

Published Aug 15, 2022

Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code.

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2020-21641

Published Aug 15, 2022

Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and sca…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2019-12133

Published Jun 18, 2019

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover,…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-7 of 7 CVEsPage 1 of 1