Vendor/product archive

zohocorp / manageengine_application_control_plus CVEs

Beta · best-effort

4 CVEs tagged to zohocorp / manageengine_application_control_plus — 1 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zohocorp vendor archive

CVE-2023-6105

Published Nov 15, 2023

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-47966

Published Jan 18, 2023

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Jav…

CVSS 9.8 · Critical

evidence mentions: 40
Buzz score: 80.7

KEV listedPublic PoC observed

Vendor/product tagsBeta · best-effort

CVE-2020-15595

Published Sep 30, 2020

An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements manage…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-15594

Published Sep 30, 2020

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to disc…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1