Vulnerabilidades en ManageEngine
88 resultadosCVE-2023-49335HIGHZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.EPSS 3.0%CVE-2023-49334HIGHZoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.EPSS 3.0%CVE-2023-49331HIGHZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.EPSS 3.0%CVE-2023-49332HIGHZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.EPSS 3.0%CVE-2016-9491—ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entityEPSS 2.5%CVE-2024-5608HIGHSQL InjectionEPSS 2.5%CVE-2024-5471HIGHAgent takeoverEPSS 2.5%CVE-2025-3835CRITICALRemote Code ExecutionEPSS 2.4%CVE-2024-10839HIGHXML External EntityEPSS 2.4%CVE-2023-49330HIGHZoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.EPSS 2.3%CVE-2024-27310MEDIUMDOS VulnerabilityEPSS 2.3%CVE-2024-21791MEDIUMSQL Injection in ADAudit PlusEPSS 2.2%CVE-2024-6204HIGHSQL injectionEPSS 2.0%CVE-2024-27314LOWStored XSS VulnerabilityEPSS 1.9%CVE-2025-41403HIGHSQL InjectionEPSS 1.8%CVE-2025-3834HIGHSQL InjectionEPSS 1.7%CVE-2025-36528HIGHSQL InjectionEPSS 1.7%CVE-2025-27709HIGHSQL InjectionEPSS 1.7%CVE-2025-41444HIGHSQL InjectionEPSS 1.7%CVE-2016-9490—ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerabilityEPSS 1.7%