CVE-2023-6105
Published Nov 15, 2023An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host…
Vendor/product archive
zohocorp / manageengine_datasecurity_plus CVEs
Beta · best-effort6 CVEs tagged to zohocorp / manageengine_datasecurity_plus — 2 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2023-35785
Published Aug 28, 2023Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,…
CVE-2020-24786
Published Aug 31, 2020An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecu…
CVE-2020-11532
Published May 8, 2020Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication f…
CVE-2020-11531
Published May 8, 2020The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. Th…
CVE-2019-17112
Published Oct 9, 2019An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file…
Showing 1-6 of 6 CVEsPage 1 of 1